October 2024 - Release-announce - lists.openstack.org

puppet-designate 25.0.0 (dalmatian)
by no-reply＠openstack.org 04 Oct '24

04 Oct '24

We are amped to announce the release of: puppet-designate 25.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. Changes in puppet-designate 24.0.0..25.0.0 ------------------------------------------ a18e6c7 Prepare 2024.2 release f7e4f73 Expose parameter to customize [oslo_messaging_notifications] retry 90bf5ed Add support for [oslo_messaging_rabbit] enable_cancel_on_failover 5fdb3a7 Expose tunable options for RabbitMQ heartbeat 413ac43 logging: Deprecate watch_log_file d9143cf Adjust default service description 9f50822 Add validations for keystone resource parameters 67a24c2 Expose rabbit_qos_prefetch_count 64faf03 Fix inconsistent default notification driver f6c9f69 Add support for [healthcheck] enable_by_file_paths 8bdfb02 Remove dependency on puppet-dns b86d200 Add support for [producer_task] increment_serial options 8c41a42 reno: Update master for unmaintained/zed 8bd62fc Remove configuration of BIND 9 service 7e09ca6 Remove deprecated manage_pool parameters d7e3934 mdns: Clean up deprecated parameters 682f9cf Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- manifests/backend/bind9.pp | 72 +++++-------- manifests/backend/pdns4.pp | 48 ++++----- manifests/healthcheck.pp | 7 ++ manifests/init.pp | 111 ++++++++++++++------- manifests/keystone/auth.pp | 36 +++---- manifests/logging.pp | 13 ++- manifests/mdns.pp | 46 --------- manifests/producer_task/increment_serial.pp | 32 ++++++ metadata.json | 12 +-- .../notes/bug-2079986-10aed43f57d0f55c.yaml | 7 ++ .../deprecate-watch_log_file-51f4f8723228cd45.yaml | 4 + ...enable_cancel_on_failover-7e860ff3908b8dc2.yaml | 5 + .../hc-enable_by_file_paths-4e1cdd1ae239e14a.yaml | 5 + .../mdns-cleanup-dalmetian-7588fb88c4df856a.yaml | 10 ++ .../notes/notification-retry-33da16698e35e99d.yaml | 4 + ...cer_task_increment_serial-4eb267af619775c3.yaml | 5 + .../rabbit-heartbeat-opts-7d9fb65a28ec151f.yaml | 7 ++ ...rabbit_qos_prefetch_count-64a0125d2dcacf37.yaml | 4 + ...emove-bind9-configuration-0999987234bcdf32.yaml | 6 ++ .../notes/remove-manage_pool-6eb0eb1473df9b22.yaml | 7 ++ releasenotes/source/2024.1.rst | 6 ++ releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- spec/classes/designate_backend_bind9_spec.rb | 40 +------- spec/classes/designate_backend_pdns4_spec.rb | 13 --- spec/classes/designate_healthcheck_spec.rb | 3 + spec/classes/designate_init_spec.rb | 67 ++++++++----- spec/classes/designate_keystone_auth_spec.rb | 6 +- spec/classes/designate_logging_spec.rb | 1 - ...esignate_producer_task_increment_serial_spec.rb | 45 +++++++++ 30 files changed, 349 insertions(+), 276 deletions(-)

1 0

puppet-cinder 25.0.0 (dalmatian)
by no-reply＠openstack.org 04 Oct '24

04 Oct '24

We are ecstatic to announce the release of: puppet-cinder 25.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. Changes in puppet-cinder 24.0.0..25.0.0 --------------------------------------- fcf3fd4 Prepare 2024.2 release df1f2fd Expose parameter to customize [oslo_messaging_notifications] retry 35f8f89 Add support for [oslo_messaging_rabbit] enable_cancel_on_failover 204a7f2 Support new os-brick options 2e6f49c Require nova password 6e02ee9 logging: Deprecate watch_log_file 7e0cc4f Expose configure_service b897bfd Deprecate management of cinder v3 user ff0b443 Add validations for keystone resource parameters 8bf8355 Expose rabbit_qos_prefetch_count 656c44f Add support for [healthcheck] enable_by_file_paths 9055ae4 Add manage_package to RBD backend 890806e reno: Update master for unmaintained/zed 234b28c Remove support for amqp1 messaging driver f85ffa6 Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- manifests/backend/rbd.pp | 15 ++- manifests/healthcheck.pp | 7 ++ manifests/init.pp | 113 +++-------------- manifests/keystone/auth.pp | 136 ++++++++++++--------- manifests/logging.pp | 13 +- manifests/nova.pp | 34 +++--- manifests/os_brick.pp | 17 ++- metadata.json | 8 +- ...ge_package-to-rbd-backend-ce4239485895cbd1.yaml | 5 + .../notes/configure_service-e5e355b83ecbeb9f.yaml | 5 + .../deprecate-volume-v3-user-cb5c833a5b18f007.yaml | 16 +++ .../deprecate-watch_log_file-8554d796827fb5f4.yaml | 4 + ...enable_cancel_on_failover-1098f32930dfb254.yaml | 5 + .../hc-enable_by_file_paths-b3bbf78328e6e062.yaml | 5 + .../notes/notification-retry-dafd2c1b861dd831.yaml | 4 + ...s-brick-wait_mpath_device-bff9501f0e5225d6.yaml | 8 ++ ...rabbit_qos_prefetch_count-11fc96c4347c7e12.yaml | 4 + .../notes/remove-amqp1-c99a5ccc0871ad59.yaml | 4 + .../require-nova-password-06929462c62cc63a.yaml | 13 ++ releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- spec/classes/cinder_healthcheck_spec.rb | 3 + spec/classes/cinder_init_spec.rb | 50 ++------ spec/classes/cinder_keystone_auth_spec.rb | 6 +- spec/classes/cinder_logging_spec.rb | 1 - spec/classes/cinder_nova_spec.rb | 27 ++-- spec/classes/cinder_os_brick_spec.rb | 12 +- spec/defines/cinder_backend_rbd_spec.rb | 9 ++ 29 files changed, 292 insertions(+), 241 deletions(-)

1 0

puppet-aodh 25.0.0 (dalmatian)
by no-reply＠openstack.org 04 Oct '24

04 Oct '24

We are delighted to announce the release of: puppet-aodh 25.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. Changes in puppet-aodh 24.0.0..25.0.0 ------------------------------------- 105c5ca Prepare 2024.2 release 757b677 Expose parameter to customize [oslo_messaging_notifications] retry e953e3b Rename parameters for queue manager options 649aac3 Rename enable_cancel_on_failover parameter 3667928 logging: Deprecate watch_log_file 0dfb7be Expose configure_service f77f3ed Expose rabbit_qos_prefetch_count ba7a10c Add support for [oslo_messaging_rabbit] rabbit_stream_fanout 96bd6ba rabbitmq: Support queue manager options 87ea30d Add support for [oslo_messaging_rabbit] enable_cancel_on_failover d9656f8 Add support for [healthcheck] enable_by_file_paths 9dc871a Add validations for keystone resource parameters 10f001b reno: Update master for unmaintained/zed 38fcbdc Remove support for amqp1 messaging driver a213cbd Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- manifests/healthcheck.pp | 7 + manifests/init.pp | 154 ++++++++------------- manifests/keystone/auth.pp | 42 +++--- manifests/logging.pp | 13 +- metadata.json | 8 +- .../notes/configure_service-f332e1faf10dfc10.yaml | 5 + .../deprecate-watch_log_file-6f414067deb5cc8c.yaml | 4 + ...enable_cancel_on_failover-c8ab28cfe303a700.yaml | 4 + .../hc-enable_by_file_paths-17fc4a38a2e0e5a1.yaml | 5 + .../notes/notification-retry-9dde0e986fc1b4b3.yaml | 4 + .../rabbit-queue-manager-143e28f3ad172721.yaml | 7 + ...rabbit_qos_prefetch_count-a5b3ec24883bac8e.yaml | 4 + .../rabbit_stream_fanout-1836844c6865d08e.yaml | 4 + .../notes/remove-amqp1-0593ad9afb227fa9.yaml | 4 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- spec/classes/aodh_healthcheck_spec.rb | 3 + spec/classes/aodh_init_spec.rb | 62 ++++----- spec/classes/aodh_keystone_auth_spec.rb | 7 +- spec/classes/aodh_logging_spec.rb | 1 - 21 files changed, 187 insertions(+), 160 deletions(-)

1 0

ironic 26.1.1 (dalmatian)
by no-reply＠openstack.org 03 Oct '24

03 Oct '24

We are gleeful to announce the release of: ironic 26.1.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 26.1.1 ^^^^^^ Security Issues *************** * An issue in Ironic has been resolved where image checksums would not be checked prior to the conversion of an image to a "raw" format image from another image format. With default settings, this normally would not take place, however the "image_download_source" option, which is available to be set at a "node" level for a single deployment, by default for that baremetal node in all cases, or via the "[agent]image_download_source" configuration option when set to "local". By default, this setting is "http". This was in concert with the "[DEFAULT]force_raw_images" when set to "True", which caused Ironic to download and convert the file. In a fully integrated context of Ironic's use in a larger OpenStack deployment, where images are coming from the Glance image service, the previous pattern was not problematic. The overall issue was introduced as a result of the capability to supply, cache, and convert a disk image provided as a URL by an authenticated user. Ironic will now validate the user supplied checksum prior to image conversion on the conductor. This can be disabled using the "[conductor]disable_file_checksum" configuration option. Bug Fixes ********* * Fixes a security issue where Ironic would fail to checksum disk image files it downloads when Ironic had been requested to download and convert the image to a raw image format. This required the "image_download_source" to be explicitly set to "local", which is not the default. This fix can be disabled by setting "[conductor]disable_file_checksum" to "True", however this option will be removed in new major Ironic releases. As a result of this, parity has been introduced to align Ironic to Ironic-Python-Agent's support for checksums used by "standalone" users of Ironic. This includes support for remote checksum files to be supplied by URL, in order to prevent breaking existing users which may have inadvertently been leveraging the prior code path. This support can be disabled by setting "[conductor]disable_support_for_checksum_files" to "True". * Fixes aborting in-band inspection. Previously, it would fail with "Can not transition from state 'inspect failed' on event 'abort'". Changes in ironic 26.1.0..26.1.1 -------------------------------- afe4f4809 Checksum files before raw conversion 3f7f75f47 Fix double transition to INSPECTFAIL on aborting in-band inspection 4f90f4234 Update TOX_CONSTRAINTS_FILE for stable/2024.2 5989e389a Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic/common/checksum_utils.py | 258 +++++++++++++++++++++ ironic/common/exception.py | 22 ++ ironic/common/image_service.py | 37 +++ ironic/common/images.py | 7 +- ironic/conductor/inspection.py | 5 +- ironic/conf/conductor.py | 22 ++ ironic/drivers/modules/deploy_utils.py | 70 ++++-- ironic/drivers/modules/image_cache.py | 44 +++- ironic/drivers/modules/inspector/agent.py | 8 +- .../unit/drivers/modules/inspector/test_agent.py | 40 ++++ .../unit/drivers/modules/test_deploy_utils.py | 229 ++++++++++++++++-- ...hecksum-before-conversion-66d273b94fa2ba4d.yaml | 44 ++++ .../notes/inspect-abort-8add5e6e6b599357.yaml | 5 + tox.ini | 14 +- 21 files changed, 1207 insertions(+), 94 deletions(-)

1 0

ironic 23.0.3 (bobcat)
by no-reply＠openstack.org 03 Oct '24

03 Oct '24

We are stoked to announce the release of: ironic 23.0.3 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 23.0.3 ^^^^^^ Security Issues *************** * An issue in Ironic has been resolved where image checksums would not be checked prior to the conversion of an image to a "raw" format image from another image format. With default settings, this normally would not take place, however the "image_download_source" option, which is available to be set at a "node" level for a single deployment, by default for that baremetal node in all cases, or via the "[agent]image_download_source" configuration option when set to "local". By default, this setting is "http". This was in concert with the "[DEFAULT]force_raw_images" when set to "True", which caused Ironic to download and convert the file. In a fully integrated context of Ironic's use in a larger OpenStack deployment, where images are coming from the Glance image service, the previous pattern was not problematic. The overall issue was introduced as a result of the capability to supply, cache, and convert a disk image provided as a URL by an authenticated user. Ironic will now validate the user supplied checksum prior to image conversion on the conductor. This can be disabled using the "[conductor]disable_file_checksum" configuration option. Bug Fixes ********* * Fixes inspection failure when "bmc_address" or "bmc_v6address" is "null" in the inventory received from the ramdisk. * Fixes a security issue where Ironic would fail to checksum disk image files it downloads when Ironic had been requested to download and convert the image to a raw image format. This required the "image_download_source" to be explicitly set to "local", which is not the default. This fix can be disabled by setting "[conductor]disable_file_checksum" to "True", however this option will be removed in new major Ironic releases. As a result of this, parity has been introduced to align Ironic to Ironic-Python-Agent's support for checksums used by "standalone" users of Ironic. This includes support for remote checksum files to be supplied by URL, in order to prevent breaking existing users which may have inadvertently been leveraging the prior code path. This support can be disabled by setting "[conductor]disable_support_for_checksum_files" to "True". * Fixes aborting in-band inspection. Previously, it would fail with "Can not transition from state 'inspect failed' on event 'abort'". Changes in ironic 23.0.2..23.0.3 -------------------------------- b3d85c494 Checksum files before raw conversion 7c996f0aa Fix double transition to INSPECTFAIL on aborting in-band inspection 009f73717 Fix inspection if bmc_address or bmc_v6address is None 1588d4215 Try limiting MTU to at least 1280 786996b77 [CI][stable only] fix zuul config fbe70f8e6 [CI] Fix job parent name Diffstat (except docs and test files) ------------------------------------- devstack/settings | 11 +- ironic/api/controllers/v1/ramdisk.py | 4 +- ironic/common/checksum_utils.py | 258 +++++++++++++++++++++ ironic/common/exception.py | 22 ++ ironic/common/image_service.py | 35 +++ ironic/common/images.py | 7 +- ironic/conductor/inspection.py | 5 +- ironic/conf/conductor.py | 22 ++ ironic/drivers/modules/deploy_utils.py | 70 ++++-- ironic/drivers/modules/image_cache.py | 44 +++- ironic/drivers/modules/inspector/agent.py | 8 +- .../unit/drivers/modules/inspector/test_agent.py | 40 ++++ .../unit/drivers/modules/test_deploy_utils.py | 229 ++++++++++++++++-- .../notes/bmc-address-none-8214a3f7b67d6a0d.yaml | 5 + ...hecksum-before-conversion-66d273b94fa2ba4d.yaml | 44 ++++ .../notes/inspect-abort-8add5e6e6b599357.yaml | 5 + zuul.d/ironic-jobs.yaml | 3 +- 24 files changed, 1216 insertions(+), 93 deletions(-)

1 0

ironic 24.1.3 (caracal)
by no-reply＠openstack.org 03 Oct '24

03 Oct '24

We are ecstatic to announce the release of: ironic 24.1.3 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 24.1.3 ^^^^^^ Security Issues *************** * An issue in Ironic has been resolved where image checksums would not be checked prior to the conversion of an image to a "raw" format image from another image format. With default settings, this normally would not take place, however the "image_download_source" option, which is available to be set at a "node" level for a single deployment, by default for that baremetal node in all cases, or via the "[agent]image_download_source" configuration option when set to "local". By default, this setting is "http". This was in concert with the "[DEFAULT]force_raw_images" when set to "True", which caused Ironic to download and convert the file. In a fully integrated context of Ironic's use in a larger OpenStack deployment, where images are coming from the Glance image service, the previous pattern was not problematic. The overall issue was introduced as a result of the capability to supply, cache, and convert a disk image provided as a URL by an authenticated user. Ironic will now validate the user supplied checksum prior to image conversion on the conductor. This can be disabled using the "[conductor]disable_file_checksum" configuration option. Bug Fixes ********* * Fixes inspection failure when "bmc_address" or "bmc_v6address" is "null" in the inventory received from the ramdisk. * Fixes a security issue where Ironic would fail to checksum disk image files it downloads when Ironic had been requested to download and convert the image to a raw image format. This required the "image_download_source" to be explicitly set to "local", which is not the default. This fix can be disabled by setting "[conductor]disable_file_checksum" to "True", however this option will be removed in new major Ironic releases. As a result of this, parity has been introduced to align Ironic to Ironic-Python-Agent's support for checksums used by "standalone" users of Ironic. This includes support for remote checksum files to be supplied by URL, in order to prevent breaking existing users which may have inadvertently been leveraging the prior code path. This support can be disabled by setting "[conductor]disable_support_for_checksum_files" to "True". * Fixes aborting in-band inspection. Previously, it would fail with "Can not transition from state 'inspect failed' on event 'abort'". Changes in ironic 24.1.2..24.1.3 -------------------------------- 0d6b5c9a2 Checksum files before raw conversion 99c786d73 Fix double transition to INSPECTFAIL on aborting in-band inspection 19de7ae2f Fix inspection if bmc_address or bmc_v6address is None d8440aac9 Try limiting MTU to at least 1280 Diffstat (except docs and test files) ------------------------------------- devstack/settings | 11 +- ironic/api/controllers/v1/ramdisk.py | 4 +- ironic/common/checksum_utils.py | 258 +++++++++++++++++++++ ironic/common/exception.py | 22 ++ ironic/common/image_service.py | 37 +++ ironic/common/images.py | 7 +- ironic/conductor/inspection.py | 5 +- ironic/conf/conductor.py | 22 ++ ironic/drivers/modules/deploy_utils.py | 70 ++++-- ironic/drivers/modules/image_cache.py | 44 +++- ironic/drivers/modules/inspector/agent.py | 8 +- .../unit/drivers/modules/inspector/test_agent.py | 40 ++++ .../unit/drivers/modules/test_deploy_utils.py | 229 ++++++++++++++++-- .../notes/bmc-address-none-8214a3f7b67d6a0d.yaml | 5 + ...hecksum-before-conversion-66d273b94fa2ba4d.yaml | 44 ++++ .../notes/inspect-abort-8add5e6e6b599357.yaml | 5 + 23 files changed, 1226 insertions(+), 93 deletions(-)

1 0

os-traits 3.2.0
by no-reply＠openstack.org 03 Oct '24

03 Oct '24

We are glad to announce the release of: os-traits 3.2.0 The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 3.1.0..3.2.0 --------------------------------- 70ecafa Add support for hw_vif_model igb image property Diffstat (except docs and test files) ------------------------------------- os_traits/compute/net.py | 1 + 1 file changed, 1 insertion(+)

1 0

neutron-fwaas-dashboard 8.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We exuberantly announce the release of: neutron-fwaas-dashboard 8.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/neutron-fwaas-dashboard Download the package from: https://tarballs.openstack.org/neutron-fwaas-dashboard/ Please report issues through: https://bugs.launchpad.net/neutron-fwaas-dashboard/+bugs For more details, please see below. Changes in neutron-fwaas-dashboard 7.0.0..8.0.0 ----------------------------------------------- 4ce5038 Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 2 files changed, 7 insertions(+)

1 0

zaqar 19.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are chuffed to announce the release of: zaqar 19.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. Changes in zaqar 18.0.0..19.0.0 ------------------------------- 94085584 Imported Translations from Zanata cf5f9a61 Remove API V1 Support Part-1 f861467b do not use str(url) to stringify a URL for subsequent use f73e4fe2 Remove dependency fallback for Python 2 102ca5ac Update master for stable/2023.1 58cacf2b reno: Update master for unmaintained/zed e8417c48 Remove nosetestes options fbe83c8a Support authentication with Redis Sentinel a45f70e9 redis: Add username 75c32dc3 Stop overriding install_command 70d2f725 Fix invalid parsing of IPv6 address in sentinel server b59385e3 Explicitly manage extra dependencies 42a61f51 Deploy mongodb only when needed 92101df6 Do not enable bionic-security repository ad8a855d Update master for stable/2024.1 c20dd170 devstack: Fix version check c03d1282 reno: Update master for unmaintained/xena 3cdfd5fa reno: Update master for unmaintained/wallaby c53658ca reno: Update master for unmaintained/victoria Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 11 +- ...s-sentinel-authentication-93fa9b1846979e41.yaml | 6 + .../notes/redis-username-98a265f61fca6a1c.yaml | 9 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 2 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 11 +- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 15 +- releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- setup.cfg | 26 +- test-requirements.txt | 2 +- tools/test-setup.sh | 6 - tox.ini | 8 +- zaqar/conf/drivers_management_store_redis.py | 2 +- zaqar/conf/drivers_message_store_redis.py | 2 +- zaqar/storage/redis/driver.py | 53 ++- zaqar/storage/sqlalchemy/catalogue.py | 8 +- zaqar/storage/sqlalchemy/driver.py | 17 +- zaqar/storage/sqlalchemy/flavors.py | 12 +- zaqar/storage/sqlalchemy/pools.py | 48 +-- zaqar/storage/sqlalchemy/queues.py | 45 +-- zaqar/storage/swift/subscriptions.py | 5 +- .../sqlalchemy_migration/test_migrations_base.py | 18 +- zaqar/transport/websocket/driver.py | 6 +- zaqar/transport/websocket/protocol.py | 17 +- 34 files changed, 321 insertions(+), 1249 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b82d4dcc..1409798c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ hacking>=6.1.0,<6.2.0 # Apache-2.0 -redis>=3.0.0 # MIT +redis>=3.4.0 # MIT

1 0

glance 29.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We contentedly announce the release of: glance 29.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. Changes in glance 28.0.1..29.0.0 -------------------------------- 806e5146 api-ref: add 'compressed' container_format 2ae69b51 Fixed typo in discovery.py 39e407e9 Documentation: fix default value for rbd_store_chunk_size c4a0a94e Remove unrecheable code 48e6471e Imported Translations from Zanata 1f3e66fb Add metadef value for stateless firmware ca40d49f Add new wait logic for functional test of add location API acb8ed5b Refresh Glance example configs for dalmatian m3 f2cda858 Release notes for Dalmatian Milestone 3 d8de63a5 Add iso file format inspector 273825d0 Remove default override for RBAC config options ea131dd1 Revert image state to queued if conversion fails 93ae58c6 Auto-detect qemu-img qed support for unit tests c5e29b6c Make separate schema for new location API 5d5f570f Remove location_strategy functionality 6f4d9c43 Bump Images API version to 2.17 cedf499e Add api-ref and documentation for new location apis 5369a825 Add new get location api b83f38cf Add functional tests for new add-location API 4281558d Add new add location api a0b7650c Add Location Import task flow ee7e96f0 Do not set_acls if store is not associated to glance node 38a2828e Imported Translations from Zanata 57f0c93d Revert "Fix import job to provide valid disk-formats list to tempest" 629ea06a Fix /healthcheck url typo in glance-api-paste 726b186e zuul: Drop openstack-tox-functional-py38-fips job 5f36dbb0 Add safety check and detection support to FI tool 8318da1d Fix: optimized upload volume in Cinder store 6459f761 Revert "Make import jobs non-voting" 867d1dd8 Add releasenote for CVE-2024-32498 fix 9df48a30 Increase timeout for tempest-integrated-storage-import job b75f3e4a Make import jobs non-voting 22d59d93 Add file format detection to format_inspector f596965b Add QED format detection to format_inspector 797e30e6 Reject unsafe qcow and vmdk files e18ebdd1 Add VMDK safety check 58a9e15a Extend format_inspector for QCOW safety 937f7d3e Reject qcow files with data-file attributes 244ccb68 Fix import job to provide valid disk-formats list to tempest 006ef41c Deprecate the "metadata_encryption_key" option 3471d6b7 Release notes for Dalmatian Milestone 2 1c523cf9 Make location URL compatible with cinder backend 74acd821 Drop sqlparse 1b11e6e3 docs: Correct grammar nit 06c727cf Fix 500 if multi-tenant swift is used dfbfdad7 Move all periodic tips jobs from py38/39 to py311/312 95abad11 Make functional-py312 voting and add it to the gate 3f49730e Imported Translations from Zanata 9f4754cd Add non-voting functional-py312 job 0812f970 Refresh Glance example configs for dalmatian m1 547a4813 Release notes for Dalmatian Milestone 1 32ee57cc Fix broken glance-cache-prefetcher utility ef58d77b Stop using deprecated defusedxml.cElementTree 205ca333 Remove sendfile support 1708fd7c reno: Update master for unmaintained/zed 24351229 Remove glossary a7c878ee Remove allow_additional_image_properties b38a567a Replace remaining usage of [DEFAULT] sql_connection 4b4e36f1 Change DB migration constant to 2024_2 3a821c41 Architecture docs: Fix list indentation 835e7f36 Remove unused run_sql_cmd 513311f9 Remove SQLAlchemy tips jobs ccd41b15 doc: remove trailing dot from hypervisor_type list 3f7b5165 Cinder: Remove ambiguous warning 70d18c86 Docs: be more explicit regarding oslo_limit.endpoint_id 3d21c1eb doc: Remove non-existing auth parameters of glance-cache.conf 46a95f77 Remove the digest_algorithm option d9838247 Update master for stable/2024.1 2862eaef refectory: fix comments b8f0bd4e reno: Update master for xena Unmaintained status 61071447 reno: Update master for wallaby Unmaintained status 749c8443 reno: Update master for victoria Unmaintained status 81772be8 Docs: Add info about the cinder store 5cf15b68 Use constants for common rules cab97a62 Do not load api-paste.ini using oslo.config 6a0b1455 Remove ubuntu focal job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 226 +- api-ref/source/v2/images-images-v2.inc | 80 + .../source/v2/images-parameters-descriptions.inc | 15 +- api-ref/source/v2/images-parameters.yaml | 16 + .../source/v2/samples/add-location-request.json | 7 + .../v2/samples/locations-list-detail-response.json | 8 + .../v2/samples/schemas-image-show-response.json | 3 +- .../v2/samples/schemas-images-list-response.json | 3 +- etc/glance-api-paste.ini | 2 +- etc/glance-api.conf | 241 +- etc/glance-cache.conf | 112 +- etc/glance-manage.conf | 40 +- etc/glance-scrubber.conf | 125 +- etc/metadefs/compute-libvirt-image.json | 5 + glance/api/middleware/version_negotiation.py | 1 + glance/api/policy.py | 8 +- glance/api/v2/discovery.py | 21 +- glance/api/v2/images.py | 220 +- glance/api/v2/policy.py | 6 + glance/api/v2/router.py | 15 + glance/api/v2/tasks.py | 3 +- glance/api/versions.py | 5 +- .../async_/flows/_internal_plugins/copy_image.py | 2 +- .../async_/flows/_internal_plugins/web_download.py | 1 - glance/async_/flows/api_image_import.py | 2 - glance/async_/flows/base_import.py | 10 + glance/async_/flows/location_import.py | 351 ++ glance/async_/flows/ovf_process.py | 7 +- glance/async_/flows/plugins/image_conversion.py | 96 +- .../async_/flows/plugins/inject_image_metadata.py | 1 - glance/async_/taskflow_executor.py | 4 + glance/cmd/cache_prefetcher.py | 2 + glance/cmd/control.py | 1 - glance/common/client.py | 40 +- glance/common/config.py | 81 +- glance/common/format_inspector.py | 354 +- glance/common/location_strategy/__init__.py | 141 - glance/common/location_strategy/location_order.py | 36 - glance/common/location_strategy/store_type.py | 144 - glance/common/scripts/utils.py | 9 + glance/common/store_utils.py | 9 +- glance/common/utils.py | 14 +- glance/common/wsgi.py | 2 +- glance/common/wsgi_app.py | 3 +- glance/db/migration.py | 2 +- glance/domain/__init__.py | 2 +- glance/locale/de/LC_MESSAGES/glance.po | 17 +- glance/locale/en_GB/LC_MESSAGES/glance.po | 385 +- glance/locale/es/LC_MESSAGES/glance.po | 17 +- glance/locale/fr/LC_MESSAGES/glance.po | 17 +- glance/locale/it/LC_MESSAGES/glance.po | 17 +- glance/locale/ja/LC_MESSAGES/glance.po | 17 +- glance/locale/ko_KR/LC_MESSAGES/glance.po | 17 +- glance/locale/pt_BR/LC_MESSAGES/glance.po | 17 +- glance/locale/ru/LC_MESSAGES/glance.po | 16 +- glance/locale/tr_TR/LC_MESSAGES/glance.po | 16 +- glance/locale/zh_CN/LC_MESSAGES/glance.po | 13 +- glance/locale/zh_TW/LC_MESSAGES/glance.po | 14 +- glance/location.py | 26 +- glance/opts.py | 5 - glance/policies/base.py | 28 +- glance/policies/discovery.py | 4 +- glance/policies/image.py | 65 +- glance/policies/metadef.py | 57 +- glance/policies/tasks.py | 18 +- .../async_/flows/plugins/test_image_conversion.py | 231 +- .../unit/async_/flows/test_location_import.py | 530 +++ .../unit/common/scripts/test_scripts_utils.py | 27 + .../add-new-add-location-api-acd459299976b4a5.yaml | 21 + ...add-new-get-locations-api-83c4b6dc077efc5f.yaml | 7 + ...9-disallow-qcow2-datafile-5d5ff4dbd590c911.yaml | 17 + ...dalmatian-metadef-changes-272f78e019a15ff1.yaml | 12 + ...-milestone-1-releasenotes-45150bc42aead80d.yaml | 6 + ...-milestone-2-releasenotes-a35ccfe1cbf95fce.yaml | 7 + .../dalmatian-milestone-3-76c9712862b6c889.yaml | 13 + ...eprecate-digest_algorithm-7cab4ef4240c522f.yaml | 10 + ...ata_encryption_key_option-8c6076ca6e361f92.yaml | 15 + .../do-not-load-paste-ini-1ec473693037ee5b.yaml | 6 + .../notes/fix-set-acls-bc17b5e125425c9b.yaml | 7 + ...compatible-with-locations-1f3e938ff7e11c7d.yaml | 9 + ...ditional_image_properties-ae33902e7967661f.yaml | 4 + ...on-strategy-functionality-b1b562e68608a6f8.yaml | 4 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 336 +- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 63 - releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 5 +- setup.cfg | 4 +- test-requirements.txt | 1 - tools/test_format_inspector.py | 7 + tox.ini | 2 +- 127 files changed, 5298 insertions(+), 6014 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 98552add..3daf1052 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +2 @@ pbr>=3.1.1 # Apache-2.0 -defusedxml>=0.6.0 # PSF +defusedxml>=0.7.1 # PSF @@ -10 +9,0 @@ WebOb>=1.8.1 # MIT -sqlparse>=0.2.2 # BSD @@ -39 +38 @@ oslo.reports>=1.18.0 # Apache-2.0 -oslo.policy>=3.11.0 # Apache-2.0 +oslo.policy>=4.4.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3123bfd9..dc04b9d0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -23 +22,0 @@ psycopg2>=2.8.4 # LGPL/ZPL -pysendfile>=2.0.0;sys_platform!='win32' # MIT

1 0

watcher 13.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are satisfied to announce the release of: watcher 13.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. Changes in watcher 12.0.0.0rc1..13.0.0 -------------------------------------- a9dc3794 Imported Translations from Zanata d6f16919 SQLAlchemy 2.0: Omnibus fixes patch bc5922c6 Fix oslo.db >= 15.0.0 compatibility Diffstat (except docs and test files) ------------------------------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 8 +++- .../versions/0f6042416884_add_apscheduler_jobs.py | 2 +- watcher/db/sqlalchemy/api.py | 44 +++++++++++----------- watcher/db/sqlalchemy/job_store.py | 41 ++++++++++++++------ 4 files changed, 59 insertions(+), 36 deletions(-)

1 0

masakari 18.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are overjoyed to announce the release of: masakari 18.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/masakari Download the package from: https://tarballs.openstack.org/masakari/ Please report issues through: https://bugs.launchpad.net/masakari/+bugs For more details, please see below. Changes in masakari 17.0.0..18.0.0 ---------------------------------- ca1e09d Ensure migration script use correct alembic table 15def73 Replace deprecated oslo_db.concurrency.TpoolDbapiWrapper 81e74e1 pre-commit: Bump versions, switch to native hacking plugin a9509f8 Remove SQLAlchemy tips jobs f1cec31 Update master for stable/2024.1 f4c64a8 reno: Update master for unmaintained/xena ae08617 reno: Update master for unmaintained/wallaby e40c832 reno: Update master for unmaintained/victoria 73b4892 reno: Update master for unmaintained/yoga 4f71562 install dependencies when installing masakari Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 14 +++++--------- .zuul.yaml | 18 ------------------ masakari/db/api.py | 4 ++-- masakari/db/sqlalchemy/migration.py | 9 +++++++-- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/yoga.rst | 2 +- 11 files changed, 28 insertions(+), 37 deletions(-)

1 0

cloudkitty-dashboard 19.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We high-spiritedly announce the release of: cloudkitty-dashboard 19.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/cloudkitty-dashboard Download the package from: https://pypi.org/project/cloudkitty-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty- dashboard For more details, please see below. Changes in cloudkitty-dashboard 18.0.0..19.0.0 ---------------------------------------------- e7bf46d Imported Translations from Zanata 560398d reno: Update master for unmaintained/zed 0a93bae Imported Translations from Zanata 2484e02 Update master for stable/2024.1 21f0e1c Add options to attach pre/postfix to rate value a0be758 reno: Update master for unmaintained/xena 84356bc reno: Update master for unmaintained/wallaby 50340de reno: Update master for unmaintained/victoria Diffstat (except docs and test files) ------------------------------------- .../dashboards/admin/summary/views.py | 13 +++++++++ .../dashboards/project/rating/views.py | 9 ++++++ cloudkittydashboard/utils.py | 9 ++++++ ...re-post-fix-to-rate-value-2d78f5cb7c289445.yaml | 10 +++++++ releasenotes/source/2024.1.rst | 6 ++++ releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 29 ++++++++++++++++-- releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- 12 files changed, 113 insertions(+), 6 deletions(-)

1 0

heat 23.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are psyched to announce the release of: heat 23.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. 23.0.0 ^^^^^^ New Features ************ * Add to "OS::Designate::RecordSet" new types: CAA, CERT, NAPTR. * Fixed the "OS::Heat::UpdateWaitConditionHandle" resource type, which caused stack update to fail consistently. * The following parameters have been added, to define timeout in internal HTTP requests. * "[DEFAULT] metadata_put_timeout" * "[DEFAULT] template_fetch_timeout" * "[ec2authtoken] timeout" Upgrade Notes ************* * Python 3.8 support was dropped. The minimum version of Python now supported is Python 3.9. * Integration with sahara has been removed because the sahara project has been retired. Because of the removal, the following resource types are no longer supported and now hidden. * "OS::Senlin::Cluster" * "OS::Senlin::Node" * "OS::Senlin::Policy" * "OS::Senlin::Profile" * "OS::Senlin::Receiver" Also, the options in "[clients_sahara]" section have been removed. * Default value of the "[DEFAULT] hidden_stack_tags" option has been updated and now stacks with the "data-processing-cluster" tag is not hidden by default. * Integration with senlin has been removed because the senlin project has been retired. Because of the removal, the following resource types are no longer supported and now hidden. * "OS::Senlin::Cluster" * "OS::Senlin::Node" * "OS::Senlin::Policy" * "OS::Senlin::Profile" * "OS::Senlin::Receiver" Also, the options in "[clients_senlin]" section have been removed. Changes in heat 22.0.0..23.0.0 ------------------------------ 0cd825e60 Remove logic for nova-network a806b400c Try archive path to download Fedora image d1c0066f6 Remove deprecated heat-keystone-setup cad151a1b Fix octavia quota resource ad811fc6c Remove default override for RBAC config options 6fa82cd25 Imported Translations from Zanata 33fba03f8 Always use Identity v3 API c0ab82562 Fix [heat_plugin] auth_version 64e21e554 Imported Translations from Zanata c4964d37f Python 3.12: do not use ssl.wrap_socket 9d449ab4c OS::Designate::RecordSet: allow CAA, CERT, NAPTR type aafee829a Disable openstack-cli-server 954cc656f Resolve B113 error (Requests call without timeout) 8f3c51f8a Remove unmaintained install/uninstall script d8c10fb72 Fix input validation for provider net segmentation id 4fb4256cf do not use str(url) to stringify a URL for subsequent use 915ba0ced Remove SQLAlchemy tips jobs 0290f8a58 Remove reference to devstack-gate 6cbf9a1e3 Remove Sahara support 0357a4790 Remove Senlin support b56733204 trove cluster: Raise property conflict if both net and port are set 85188770d Remove fallback to pytz b68411b42 Remove Python 3.8 support 1d155e48a Drop old excludes d8e0c8918 reno: Update master for unmaintained/zed 78119f60c Use stable Resource plugin interface in UpdateWaitConditionHandle f7eddbef8 Fix 'if' function with only 2 arguments bdc525809 Remove unused heat-functional-non-apache eea7ea099 Revert "Skip aodhclient plugin test" 29a594c85 Fix wrong shebang of loguserdata.py 8496fb37e Remove unused packaging library 5dc1e488d Remove skip level upgrade job c578686b6 Fix networks validation for Trove 399352dfd Fix update of OS::Heat::UpdateWaitConditionHandle 76d175c27 Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 36 +- README.rst | 2 - bin/heat-keystone-setup | 286 --------- devstack/lib/heat | 8 +- heat/api/aws/ec2token.py | 8 +- heat/cloudinit/loguserdata.py | 2 +- heat/common/config.py | 16 +- heat/common/policy.py | 8 +- heat/common/urlfetch.py | 3 +- heat/common/wsgi.py | 8 +- heat/db/migration.py | 5 +- heat/engine/clients/os/sahara.py | 197 ------ heat/engine/clients/os/senlin.py | 160 ----- heat/engine/constraint/common_constraints.py | 13 +- heat/engine/function.py | 4 +- heat/engine/resource.py | 9 - .../resources/openstack/designate/recordset.py | 4 +- .../openstack/heat/wait_condition_handle.py | 3 +- .../resources/openstack/manila/share_network.py | 21 +- .../resources/openstack/neutron/provider_net.py | 6 +- heat/engine/resources/openstack/octavia/quota.py | 4 +- heat/engine/resources/openstack/sahara/cluster.py | 298 +-------- .../resources/openstack/sahara/data_source.py | 120 +--- heat/engine/resources/openstack/sahara/image.py | 109 +--- heat/engine/resources/openstack/sahara/job.py | 300 +--------- .../resources/openstack/sahara/job_binary.py | 117 +--- .../engine/resources/openstack/sahara/templates.py | 593 +----------------- heat/engine/resources/openstack/senlin/cluster.py | 390 +----------- heat/engine/resources/openstack/senlin/node.py | 191 +----- heat/engine/resources/openstack/senlin/policy.py | 188 +----- heat/engine/resources/openstack/senlin/profile.py | 61 +- heat/engine/resources/openstack/senlin/receiver.py | 93 +-- heat/engine/resources/openstack/senlin/res_base.py | 39 +- heat/engine/resources/openstack/trove/cluster.py | 19 +- heat/engine/resources/openstack/trove/instance.py | 8 +- heat/engine/service_software_config.py | 8 +- heat/locale/de/LC_MESSAGES/heat.po | 663 +-------------------- heat/locale/es/LC_MESSAGES/heat.po | 515 +--------------- heat/locale/fr/LC_MESSAGES/heat.po | 513 +--------------- heat/locale/it/LC_MESSAGES/heat.po | 511 +--------------- heat/locale/ja/LC_MESSAGES/heat.po | 496 +-------------- heat/locale/ko_KR/LC_MESSAGES/heat.po | 493 +-------------- heat/locale/pt_BR/LC_MESSAGES/heat.po | 498 +--------------- heat/locale/ru/LC_MESSAGES/heat.po | 497 +-------------- heat/locale/zh_CN/LC_MESSAGES/heat.po | 470 +-------------- heat/locale/zh_TW/LC_MESSAGES/heat.po | 471 +-------------- .../functional/test_conditional_exposure.py | 25 +- install.sh | 122 ---- ...caa-cert-naptr-recordsets-49f37eb55e51b2cc.yaml | 4 + .../notes/drop-python-3-8-70fe6de72f16f36c.yaml | 5 + ...UpdateWaitConditionHandle-98ef3ed47892bbc8.yaml | 5 + .../notes/remove-sahara-c01d0ca29d3a9e1d.yaml | 19 + .../notes/remove-senlin-586d6754a7610bdf.yaml | 15 + .../notes/requests-timeout-5d586f59dbe9bbfd.yaml | 9 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 275 ++++++--- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 14 +- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 47 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 15 +- setup.cfg | 18 +- test-requirements.txt | 6 +- tox.ini | 6 +- uninstall.sh | 21 - 102 files changed, 588 insertions(+), 11649 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f25280dcc..5f3ad3fdf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ cryptography>=2.5 # BSD/Apache-2.0 -eventlet!=0.18.3,!=0.20.1,!=0.21.0,!=0.23.0,!=0.25.0,>=0.18.2 # MIT +eventlet>=0.18.2 # MIT @@ -8 +8 @@ keystonemiddleware>=5.1.0 # Apache-2.0 -lxml!=3.7.0,>=4.5.0 # BSD +lxml>=4.5.0 # BSD @@ -21 +21 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=3.11.0 # Apache-2.0 +oslo.policy>=4.4.0 # Apache-2.0 @@ -24 +24 @@ oslo.serialization>=2.25.0 # Apache-2.0 -oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.service>=1.24.0 # Apache-2.0 @@ -31 +30,0 @@ aodhclient>=0.9.0 # Apache-2.0 -packaging>=21.0 # Apache-2.0 @@ -42 +41 @@ python-manilaclient>=1.16.0 # Apache-2.0 -python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0 +python-mistralclient>=3.1.0 # Apache-2.0 @@ -48 +46,0 @@ python-openstackclient>=3.12.0 # Apache-2.0 -python-saharaclient>=1.4.0 # Apache-2.0 @@ -54 +51,0 @@ python-zunclient>=3.4.0 # Apache-2.0 -pytz>=2013.6;python_version<"3.9" # MIT @@ -58 +55 @@ tenacity>=6.1.0 # Apache-2.0 -tzdata>=2022.4;python_version>="3.9" # MIT +tzdata>=2022.4 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index bea7ec676..4fbc26156 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +4,2 @@ hacking>=6.1.0,<6.2.0 # Apache-2.0 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 -coverage!=4.4,>=4.0 # Apache-2.0 +bandit>=1.1.0 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -8 +8 @@ fixtures>=3.0.0 # Apache-2.0/BSD -kombu!=4.0.2,>=5.0.1 # BSD +kombu>=5.0.1 # BSD

1 0

zun-ui 14.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are tickled pink to announce the release of: zun-ui 14.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/zun-ui Download the package from: https://tarballs.openstack.org/zun-ui/ Please report issues through: https://bugs.launchpad.net/zun-ui/+bugs For more details, please see below. Changes in zun-ui 13.0.0..14.0.0 -------------------------------- fcb22c9 reno: Update master for unmaintained/xena 9a775b1 reno: Update master for unmaintained/wallaby 97f990c reno: Update master for unmaintained/victoria 8cdf78e Update master for stable/2024.1 0e45ad4 reno: Update master for unmaintained/yoga Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/yoga.rst | 2 +- 6 files changed, 11 insertions(+), 4 deletions(-)

1 0

zun 14.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are happy to announce the release of: zun 14.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/zun Download the package from: https://tarballs.openstack.org/zun/ Please report issues through: https://bugs.launchpad.net/zun/+bugs For more details, please see below. Changes in zun 13.0.0..14.0.0 ----------------------------- 2681091f Do not use strings as attributes for loader c05fe096 reno: Update master for unmaintained/zed 4cc1f955 Fix unit test 69d456e3 reno: Update master for unmaintained/xena 54ae3397 reno: Update master for unmaintained/wallaby b9d37251 reno: Update master for unmaintained/victoria de1629b3 Update master for stable/2024.1 02c83aac reno: Update master for unmaintained/yoga Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/yoga.rst | 2 +- releasenotes/source/zed.rst | 2 +- .../33cdd98bb9b2_split_volume_mapping_table.py | 7 +- ...8da7_convert_type_of_command_from_string_to_.py | 5 +- .../d502ce8fb705_add_rp_uuid_to_compute_node.py | 7 +- zun/db/sqlalchemy/api.py | 1201 +++++++++++--------- 11 files changed, 691 insertions(+), 546 deletions(-)

1 0

skyline-console 5.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are amped to announce the release of: skyline-console 5.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/skyline-console Download the package from: https://tarballs.openstack.org/skyline-console/ Please report issues through: https://bugs.launchpad.net/skyline-apiserver/+bugs For more details, please see below. Changes in skyline-console 4.0.0.0rc1..5.0.0 -------------------------------------------- 5501bad7 feat: add Turkish language to the default config d037b061 fix: fix user/group column 6b85304c Upgrade to use node 16 instead of node 14 7513e64f fix: fix edit instance f70772ec Lock setuptools version as 69.2.0 3d9d596c feat: update tip for the user-domain input a28eedf9 feat: update login form 3465a2fb feat: update neutron rbac policy 26ed30cd fix: update row action button style 0b7d79f9 Implements: fix bug, check type of prometheus query result data Closes-Bug: 2015991 3f4c8fdb feat: add instance info 2d8d8a76 test: add firewall e2e d7669a7c feat: The RBAC Policies has been added. c22e9bbe feat: add unrestricted column for application credential 6fa7e0fb feat: support fwaas v2 e6ebeee2 feat: update prompts for unrestricted b92e31b4 feat: update i18n f8197614 reno: Update master for unmaintained/zed ff9191e0 Fix: Updating the constant in the Zun test. 575e7148 feat: Add field unrestricted to appliction credentials 7b7f594d feat: udpate manage security group 0a03ff8e fix: update ipv6-encap i18n 952543f5 feat: update creating heat stack a0be5a12 feat: update user group role check 3c712812 feat: update subnet actions 6f8c62d3 feat: update refresh tab data f94e400e fix: update stack name i18n 34a41dd3 feat: update qos policy info 84d1e7af fix: update long title style for menu 791176a4 feat: optimize menu display 9962be67 feat: update code format 9215b712 refactor: refactor NameInput component 813ee6a3 feat: hide masakari menu b3b81d70 feat: update detach volume 9d6d3d6d feat: disable attach volume to the same vm e825d510 feat: limit the height of prompts ae3cfafb feat: update qos spec column for volume type 4cc407f7 feat: update file system space info 7639237e feat: update i18n for instance console log 46f3668f fix: physical node page display error fe4ac8b8 feat: update user data 8613ef39 fix: fix create/delete encryption for volume type c5fa4cb7 feat: Adding log feature to Nova instance detail page. 80e1d127 feat: support non-root users to log in d02497a1 feat: support disable/enable snat e1a9d17f fix: fix subnet cidr tip fa296591 fix: fix create security group rule 45354c97 Update master for stable/2024.1 6219bf69 [translate] add Korean Readme and README Folder Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 33 +-- Makefile | 3 + README.rst | 2 +- README/README-ko_KR.rst | 132 ++++++++++ README-zh_CN.rst => README/README-zh_CN.rst | 50 ++-- config/config.yaml | 1 + ...n-Credential-Unrestricted-1940ac44f96576ac.yaml | 6 + ...isable-Enable-Router-SNAT-1f09d5e8aa1a07bb.yaml | 8 + .../notes/Support-Fwaas-V2-055c1e400f093ede.yaml | 12 + ...Openstack-Service-Monitor-4e2fb683f379b639.yaml | 6 + .../Support-non-Root-Users-0792a1ba891b28eb.yaml | 6 + ...te-Domain-Input-For-Login-8acd4d7ad63f0dc2.yaml | 8 + ...feat_instance_log_to_nova-c14b17bdd1e4b708.yaml | 5 + ..._rbac_policies_to_neutron-1578109a8642e3a3.yaml | 6 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- src/client/client/constants.js | 2 + src/client/masakari/index.js | 1 - src/client/neutron/index.js | 5 + src/components/FormItem/NameInput/index.jsx | 161 +++++++----- src/components/FormItem/NetworkSelect/index.jsx | 51 ++-- .../component/hooks/useNodeSelect.jsx | 3 + .../PrometheusChart/utils/dataHandler.js | 5 +- .../Tables/Base/ItemActionButtons/index.jsx | 4 +- .../Tables/Base/ItemActionButtons/index.less | 5 + src/containers/List/index.jsx | 8 + src/containers/List/index.less | 5 + src/containers/TabDetail/index.jsx | 19 ++ src/core/i18n.js | 35 +-- src/layouts/Base/Menu.jsx | 40 +-- src/layouts/Base/index.less | 12 + src/layouts/admin-menu.jsx | 54 +++- src/layouts/menu.jsx | 69 +++++ src/locales/en.json | 124 ++++++++- src/locales/index.js | 2 +- src/locales/ko-kr.json | 124 ++++++++- src/locales/ru.json | 124 ++++++++- src/locales/tr-tr.json | 124 ++++++++- src/locales/zh-hans.json | 126 ++++++++- src/pages/auth/containers/Login/index.jsx | 66 +++-- .../Overview/components/QuotaOverview.jsx | 19 ++ src/pages/basic/routes/index.js | 6 +- .../Instance/Detail/BaseDetail/index.jsx | 12 +- .../containers/Instance/Detail/Log/index.jsx | 101 +++++++ .../compute/containers/Instance/Detail/index.jsx | 6 + .../actions/CreateIronic/SystemStep/index.jsx | 56 +++- .../Instance/actions/CreateIronic/index.jsx | 5 +- .../Instance/actions/ManageSecurityGroup.jsx | 1 + .../actions/StepCreate/NetworkStep/index.jsx | 1 + .../actions/StepCreate/SystemStep/index.jsx | 60 +++-- .../Instance/actions/StepCreate/index.jsx | 5 +- .../containers/Containers/Detail/Console.jsx | 35 ++- .../ha/containers/Hosts/Detail/BaseDetail.jsx | 16 +- src/pages/ha/containers/Hosts/Detail/index.jsx | 2 +- src/pages/ha/containers/Hosts/actions/Delete.jsx | 5 +- src/pages/ha/containers/Hosts/actions/Update.jsx | 26 +- src/pages/ha/containers/Hosts/actions/index.jsx | 2 +- src/pages/ha/containers/Hosts/index.jsx | 50 ++-- .../containers/Notifications/Detail/BaseDetail.jsx | 20 +- .../ha/containers/Notifications/Detail/index.jsx | 2 +- src/pages/ha/containers/Notifications/index.jsx | 32 ++- .../ha/containers/Segments/Detail/BaseDetail.jsx | 2 +- .../ha/containers/Segments/Detail/HostDetail.jsx | 32 ++- src/pages/ha/containers/Segments/Detail/index.jsx | 4 +- .../ha/containers/Segments/actions/AddHost.jsx | 39 +-- .../ha/containers/Segments/actions/Delete.jsx | 2 +- .../Segments/actions/StepCreate/StepHost.jsx | 92 +++---- .../Segments/actions/StepCreate/StepSegment.jsx | 9 +- .../Segments/actions/StepCreate/index.jsx | 101 ++++--- .../ha/containers/Segments/actions/Update.jsx | 18 +- src/pages/ha/containers/Segments/actions/index.jsx | 2 +- src/pages/ha/containers/Segments/index.jsx | 25 +- src/pages/ha/routes/index.js | 31 ++- .../containers/Stack/actions/Create/Parameter.jsx | 19 ++ .../containers/Project/actions/ManageUser.jsx | 6 +- .../containers/Project/actions/ManageUserGroup.jsx | 27 +- .../identity/containers/User/actions/Create.jsx | 11 +- .../containers/UserGroup/actions/ManageUser.jsx | 6 +- .../containers/OpenstackService/Services.jsx | 5 +- .../monitor/containers/OpenstackService/index.less | 6 + .../monitor/containers/PhysicalNode/index.jsx | 20 +- .../containers/DNS/Reverse/Detail/BaseDetail.jsx | 3 +- .../containers/DNS/Reverse/Detail/index.jsx | 3 +- .../Firewall/Firewall/Detail/BaseDetail.jsx | 58 +++++ .../containers/Firewall/Firewall/Detail/Port.jsx | 95 +++++++ .../Firewall/Firewall/Detail/PortDetail.jsx | 36 +++ .../containers/Firewall/Firewall/Detail/index.jsx | 86 ++++++ .../Firewall/Firewall/actions/Create.jsx | 264 +++++++++++++++++++ .../Firewall/Firewall/actions/Delete.jsx | 62 +++++ .../containers/Firewall/Firewall/actions/Edit.jsx | 155 +++++++++++ .../Firewall/Firewall/actions/ManagePort.jsx | 183 +++++++++++++ .../containers/Firewall/Firewall/actions/index.jsx | 45 ++++ .../network/containers/Firewall/Firewall/index.jsx | 139 ++++++++++ .../containers/Firewall/Policy/Detail/index.jsx | 83 ++++++ .../containers/Firewall/Policy/actions/Create.jsx | 114 ++++++++ .../containers/Firewall/Policy/actions/Delete.jsx | 75 ++++++ .../containers/Firewall/Policy/actions/Edit.jsx | 94 +++++++ .../Firewall/Policy/actions/InsertRule.jsx | 162 ++++++++++++ .../Firewall/Policy/actions/RemoveRule.jsx | 81 ++++++ .../containers/Firewall/Policy/actions/index.jsx | 49 ++++ .../network/containers/Firewall/Policy/index.jsx | 148 +++++++++++ .../containers/Firewall/Rule/Detail/BaseDetail.jsx | 48 ++++ .../containers/Firewall/Rule/Detail/index.jsx | 79 ++++++ .../containers/Firewall/Rule/actions/Create.jsx | 289 +++++++++++++++++++++ .../containers/Firewall/Rule/actions/Delete.jsx | 71 +++++ .../containers/Firewall/Rule/actions/Edit.jsx | 43 +++ .../containers/Firewall/Rule/actions/index.jsx | 50 ++++ .../network/containers/Firewall/Rule/index.jsx | 115 ++++++++ src/pages/network/containers/Firewall/index.jsx | 57 ++++ .../actions/StepCreate/BaseStep/index.jsx | 5 +- .../StepCreateComponents/PoolStep/index.jsx | 2 +- .../containers/Port/Detail/BaseDetail/index.jsx | 19 +- .../containers/RbacPolicies/Detail/Detail.jsx | 80 ++++++ .../containers/RbacPolicies/Detail/index.jsx | 57 ++++ .../containers/RbacPolicies/actions/Create.jsx | 218 ++++++++++++++++ .../containers/RbacPolicies/actions/Delete.jsx | 44 ++++ .../containers/RbacPolicies/actions/Edit.jsx | 89 +++++++ .../containers/RbacPolicies/actions/index.jsx | 30 +++ .../network/containers/RbacPolicies/index.jsx | 129 +++++++++ .../containers/Router/actions/DisableSnat.jsx | 55 ++++ .../containers/Router/actions/EnableSnat.jsx | 57 ++++ .../network/containers/Router/actions/index.jsx | 8 + .../SecurityGroup/Detail/Rule/actions/Create.jsx | 1 + .../network/containers/Subnet/actions/Delete.jsx | 7 +- .../network/containers/Subnet/actions/Edit.jsx | 8 +- src/pages/network/routes/index.js | 89 +++++++ src/pages/storage/containers/Container/index.jsx | 7 +- .../storage/containers/Volume/actions/Attach.jsx | 3 +- .../storage/containers/Volume/actions/Detach.jsx | 8 +- .../VolumeType/actions/CreateEncryption.jsx | 4 +- .../VolumeType/actions/DeleteEncryption.jsx | 4 +- .../containers/VolumeType/VolumeType/index.jsx | 4 +- .../containers/Credentials/actions/Create.jsx | 9 + .../user-center/containers/Credentials/index.jsx | 9 + src/resources/cinder/volume-type.js | 9 + src/resources/heat/stack.js | 20 +- src/resources/keystone/domain.jsx | 42 ++- src/resources/neutron/firewall-policy.jsx | 65 +++++ src/resources/neutron/firewall-port.js | 80 ++++++ src/resources/neutron/firewall-rule.js | 122 +++++++++ src/resources/neutron/firewall.js | 70 +++++ src/resources/neutron/network.jsx | 87 +++++++ src/resources/neutron/port.jsx | 83 ++++++ src/resources/neutron/rbac-policy.js | 9 + src/resources/neutron/security-group-rule.jsx | 2 +- src/resources/nova/instance.jsx | 14 +- src/resources/skyline/policy.js | 1 + src/stores/designate/reverse.js | 12 +- src/stores/index.jsx | 2 + src/stores/keystone/project.js | 6 + src/stores/masakari/hosts.js | 26 +- src/stores/neutron/firewall-policy.js | 121 +++++++++ src/stores/neutron/firewall-rule.js | 111 ++++++++ src/stores/neutron/firewall.js | 100 +++++++ src/stores/neutron/port-extension.js | 10 + src/stores/neutron/rbac-policies.js | 96 +++++++ src/stores/nova/instance.js | 18 +- src/utils/table.jsx | 13 +- test/e2e/config/config-network.yaml | 4 + .../e2e/integration/pages/compute/instance.spec.js | 1 + test/e2e/integration/pages/compute/ironic.spec.js | 1 + .../integration/pages/compute/server-group.spec.js | 1 + test/e2e/integration/pages/login.spec.js | 8 +- .../pages/network/firewall-policy.spec.js | 94 +++++++ .../pages/network/firewall-rule.spec.js | 64 +++++ .../e2e/integration/pages/network/firewall.spec.js | 106 ++++++++ test/e2e/support/commands.js | 3 +- test/e2e/support/constants.js | 8 +- test/e2e/support/resource-commands.js | 41 +++ 171 files changed, 6892 insertions(+), 567 deletions(-)

1 0

nova 30.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are chuffed to announce the release of: nova 30.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. Changes in nova 29.0.1..30.0.0 ------------------------------ 035b8404fc Fix regression with live migration on shared storage 2a870323c3 allow upgrade of pre-victoria InstanceNUMACells 1eb45e768a Add Dalmatian prelude section 521db4a435 repoduce post liberty pre vicoria instance numa db issue 8de15e9a27 only safety check bootable files created from glance e310049eab Add functional repoducer for ephemeral disks f8b2988f67 docs: update libvirt support matrix for C and D 2a1fad4145 nova-manage: modify image properties in request_spec 0d542f464b Add service version for Dalmatian 6535386dfa Update compute rpc alias for dalmatian 31accd37c8 doc: mark the maximum microversion for 2024.2 Dalmatian 0809f75d79 Skip snapshot test when missing qemu-img 329ff5e1a8 [ironic] Followup fixes around flavor ids 305a71e5f9 Ignore support-matrix.css 93b90d2b6a [ironic] Factor out metadata and send to ironic aca63b66e5 Test live migration between hosts with differnet cpu_shared_sets 804bc98759 update nova-next to use ubuntu 24.04 5fa069c29a Delete ./doc/source/_static/support-matrix.css file 8464abe56c add pyproject.toml to support pip 23.1 d854e7cc16 Use format_inspector from oslo e06890d101 libvirt: Add config option to require secure SPICE. cd05be9738 Reproducer test for image property hw_architecture 3169e7cebd libvirt: Launch instances with stateless firmware 065bf99fc7 Fix deepcopy usage for BlockDeviceMapping in get_root_info 5890c257be Add hw_firmware_stateless image property b475f0f99b Report availability of stateless firmware support 87ee88f10a [libvirt]log XML if nova fails to parse it 79d1f06094 libvirt: call get_capabilities() with all CPUs online f8b98390dc Fix PCI passthrough cleanup on reschedule c69a9eb87f Skip new image format tests 4678bcbb06 hardware: Correct log 068dbe0779 Deprecate AMI image formats a2d77845ab Functional test test_boot_reschedule_with_proper_pci_device_count c8674a88b6 libvirt: Report available TPM models 751c2e8b8b Fix s/addtional/additional/ typo f63029b461 libvirt: Remove node device XML validate flags c79a73bd42 Remove default override for RBAC config options 510cc2404e libvirt: Detect vtpm support by libvirt 9a11bb2523 libvirt: Ensure swtpm_ioctl is available for vTPM support d5a631ba77 Remove AMI snapshot format special case 8b4c522f66 Change force_format strategy to catch mismatches a3202f7bf9 Fix test_vmdk_bad_descriptor_mem_limit and test_vmdk_bad_descriptor_mem_limit_stream_optimized 2db06b58b1 api: Fix typo f57176dd29 Correct info about volume-backed server rebuild 9a04ed79a3 conf: Clarify '[api] response_validation help' text 757c333c0e cpu: Only check governor type on online cores e2697de8e4 [tools] Backport validator: handle unmaintained b8f3975d36 [tools] Ignore bot generated patches c6d8c6972d Stabilize iso format unit tests ee3ec9b8f2 [ironic] Ensure we test iterators when needed cc2514d02e fix qemu-img version dependent tests b1cc39848e Add iso file format inspector b5a1d3b4b2 Reproduce iso regression with deep format inspection 8558f59630 Fix port group network metadata generation 838daa3cad port format inspector tests from glance f254729a56 scheduler: fix _get_sharing_providers to support unlimited aggr 08be7b2a0d Fix vmdk_allowed_types checking b1b88bf001 Additional qemu safety checking on base images 9cdce71594 Check images with format_inspector for safety ec9c55cbbc Reject qcow files with data-file attributes c0ff2386ed Fix disk_formats in ceph job tempest config 64ac67fd19 api: Correct bug in flavors schema 438c405394 pre-commit: Bump autopep8 version and update repo be029783dd api: Add response body validation helper 1a93703623 conf: Add '[api] response_validation' option 0021b840a2 tests: Ensure all APIs have a request query schema 41b436bff7 api: Add remaining missing query parameter schema ff040ada4f api: Don't do version check if nothing required b1824c5c97 api: Add 'removed' decorator 9b77bae8a3 [CI] Replace deprecated regex 7491417323 api: Migrate to JSON Schema Draft 2020-12 c382f036c3 tests: Ensure API schemas are valid 7e78623ac5 api: Fix bugs in schemas 917c4f0721 tests: Ensure all APIs have a request body schema f86cd38dfe api: Add remaining missing request body schemas 847608e75a api: Add request body schemas for SG APIs 88b661b078 Handle neutron-client conflict 44c1b48b31 retry write_sys call on device busy 3811c7f648 tweak emulation job to avoid OOM errors c7e49dfa16 docs: Follow up for persistent mdevs ac8729ac87 [doc] Improve description for nova-manage db purge ee581a5c9d add functional repoducer for bug 2065927 7ff24958ee fix py312 tox definitions eed3e2b47f Stop using split UEC image (mostly) 84b0a481fe Enable OCaaS for several nova jobs d45379c6b4 docs: Add more information about unified limits bfd3525863 Fix formatting issues in extra-specs docs 50b180023f Make python 3.12 unit and functional voting 3f0879ccc3 Fix hacking test with syntax error 6ee938fd22 Fix notification object hashes for python 3.12 acbe3e28e5 do not use str(url) to stringify a URL for subsequent use a4e72f71fc Upload glance image with --file in ceph job 3c0eadae0b Reject AZ changes during aggregate add / remove host 32546d9c1b Enable virtio-scsi in nova-next 2f0c340d39 Fix device_type=lun with boot_index 575ff86a4f Avoid setting serial on raw LUN devices 0e766885f6 [ironic] Fix rebooting instance b4ff81c329 Remove old excludes fa678870b2 reno: Update master for unmaintained/zed 25c13220c6 Note the deleyad address view 3cd26b0a08 scheduler: AggregateMultitenancyIsolation to support unlimited tenant 198805c7c5 Do not close returned image-chunk iterator & get_verifier early 43dadaeb90 Fix: migration configuration with cpu_shared_set (libvirt part) 2c3f4f2da5 Fix: migration configuration with cpu_shared_set (object part) f3eb76e57b Validate flavor image min ram when resize volume-backed instance b434b42761 Regression test for bug 2007968 dcc32981dd ignore sphinx-lint series in git blame 33a56781f4 fix sphinx-lint errors in docs and add ci 8b70e29487 Remove SQLAlchemy tips jobs 233fe1865f api: Keep track of action controllers e504b76508 api: Remove FlavorManageController cabb6999a3 api: Add missing Controller inheritance 33ba0f2935 Update contributor guide for 2024.2 Dalmatian 74befb68a7 libvirt: Create persistent mdevs 2a83043bcb Update min support for Dalmatian f14c16af82 Make overcommit check for pinned instance pagesize aware 8f219fce3f Update master for stable/2024.1 1c02c0da17 Fix nova-manage image_property show unexpected keyword 37b5ed6450 reno: Update master for unmaintained/xena e0107e286c reno: Update master for unmaintained/wallaby fda1715744 reno: Update master for unmaintained/victoria 0246a5d66a Add a functest for verifying multiple VGPU allocations a1a07e0d2d Refactor vf profile for PCI device 714894a7ff Server Rescue leads to Server ERROR state if original image is deleted 5b505dede9 libvirt: Ensure both swtpm and swtpm_setup exist for vTPM support aa3e8fef7b Correctly reset instance task state in rebooting hard 131c6e0d20 tox: Drop envdir 5da11e4231 Fix tipo e6f8bf5ff5 hardware: Fix image_meta.id within get_mem_encryption_constraint 406d590a36 Always delete NVRAM files when deleting instances 1c20647a14 doc: Fix markup syntax and typo 1a520f8e5d Fix wrong nova-manage command in upgrade check a4a2b11fd1 Cleanup setup.py 18163761d0 Fix guard for NVMeOF volumes 489297d742 Add new nova.wsgi module 4e182a664e Remove nova.wsgi module 22631727b9 Update [scheduler] limit_tenants_to_placement_aggregate config help Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 6 +- .gitignore | 1 + .pre-commit-config.yaml | 11 +- .zuul.yaml | 289 ++++-------- api-ref/source/os-aggregates.inc | 6 + api-ref/source/parameters.yaml | 2 + bindep.txt | 2 + devstack/lib/mdev_samples | 6 +- .../common_payloads/ImageMetaPropsPayload.json | 2 +- .../instance-create-error.json | 4 +- .../admin/configuration/hypervisor-vmware.rst | 2 +- .../reference/libvirt-distro-support-matrix.rst | 12 + nova/api/openstack/api_version_request.py | 4 +- nova/api/openstack/common.py | 2 +- nova/api/openstack/compute/admin_actions.py | 13 +- nova/api/openstack/compute/agents.py | 15 + nova/api/openstack/compute/aggregates.py | 6 +- nova/api/openstack/compute/attach_interfaces.py | 2 + nova/api/openstack/compute/availability_zone.py | 4 + nova/api/openstack/compute/baremetal_nodes.py | 9 +- nova/api/openstack/compute/cells.py | 26 ++ nova/api/openstack/compute/certificates.py | 13 + nova/api/openstack/compute/cloudpipe.py | 19 +- nova/api/openstack/compute/console_auth_tokens.py | 4 + nova/api/openstack/compute/consoles.py | 15 + nova/api/openstack/compute/deferred_delete.py | 4 + nova/api/openstack/compute/extension_info.py | 6 +- nova/api/openstack/compute/fixed_ips.py | 15 + nova/api/openstack/compute/flavor_access.py | 8 +- nova/api/openstack/compute/flavor_manage.py | 127 ----- nova/api/openstack/compute/flavors.py | 97 ++++ nova/api/openstack/compute/flavors_extraspecs.py | 8 +- nova/api/openstack/compute/floating_ip_dns.py | 23 +- nova/api/openstack/compute/floating_ip_pools.py | 3 + nova/api/openstack/compute/floating_ips.py | 9 +- nova/api/openstack/compute/floating_ips_bulk.py | 17 + nova/api/openstack/compute/fping.py | 13 + nova/api/openstack/compute/hosts.py | 4 + nova/api/openstack/compute/hypervisors.py | 23 +- nova/api/openstack/compute/image_metadata.py | 2 + nova/api/openstack/compute/images.py | 5 + nova/api/openstack/compute/instance_actions.py | 6 +- .../openstack/compute/instance_usage_audit_log.py | 5 +- nova/api/openstack/compute/ips.py | 4 + nova/api/openstack/compute/keypairs.py | 2 +- nova/api/openstack/compute/lock_server.py | 6 +- nova/api/openstack/compute/networks.py | 20 + nova/api/openstack/compute/networks_associate.py | 16 + nova/api/openstack/compute/pause_server.py | 4 + nova/api/openstack/compute/quota_classes.py | 3 + nova/api/openstack/compute/quota_sets.py | 37 +- nova/api/openstack/compute/remote_consoles.py | 7 + nova/api/openstack/compute/rescue.py | 1 + .../openstack/compute/rest_api_version_history.rst | 4 +- nova/api/openstack/compute/routes.py | 9 +- nova/api/openstack/compute/schemas/addresses.py | 25 + .../{reset_server_state.py => admin_actions.py} | 14 + nova/api/openstack/compute/schemas/agents.py | 19 + nova/api/openstack/compute/schemas/aggregates.py | 19 +- .../openstack/compute/schemas/attach_interfaces.py | 14 + .../openstack/compute/schemas/availability_zone.py | 22 + .../openstack/compute/schemas/baremetal_nodes.py | 21 + nova/api/openstack/compute/schemas/cells.py | 24 + nova/api/openstack/compute/schemas/certificates.py | 18 + nova/api/openstack/compute/schemas/cloudpipe.py | 19 + .../compute/schemas/console_auth_tokens.py | 18 + nova/api/openstack/compute/schemas/consoles.py | 19 + .../openstack/compute/schemas/deferred_delete.py | 31 ++ .../openstack/compute/schemas/extension_info.py | 25 + nova/api/openstack/compute/schemas/fixed_ips.py | 19 + .../api/openstack/compute/schemas/flavor_access.py | 7 + .../api/openstack/compute/schemas/flavor_manage.py | 102 ---- nova/api/openstack/compute/schemas/flavors.py | 96 ++++ .../compute/schemas/flavors_extraspecs.py | 14 + .../openstack/compute/schemas/floating_ip_dns.py | 19 + .../openstack/compute/schemas/floating_ip_pools.py | 18 + nova/api/openstack/compute/schemas/floating_ips.py | 13 + .../openstack/compute/schemas/floating_ips_bulk.py | 20 + nova/api/openstack/compute/schemas/fping.py | 17 + nova/api/openstack/compute/schemas/hosts.py | 17 +- nova/api/openstack/compute/schemas/hypervisors.py | 25 +- .../openstack/compute/schemas/image_metadata.py | 6 + nova/api/openstack/compute/schemas/images.py | 52 +++ .../openstack/compute/schemas/instance_actions.py | 18 +- .../compute/schemas/instance_usage_audit_log.py | 23 + nova/api/openstack/compute/schemas/ips.py | 17 + nova/api/openstack/compute/schemas/lock_server.py | 21 +- nova/api/openstack/compute/schemas/networks.py | 21 + .../compute/schemas/networks_associate.py | 18 + nova/api/openstack/compute/schemas/pause_server.py | 31 ++ .../api/openstack/compute/schemas/quota_classes.py | 9 +- nova/api/openstack/compute/schemas/quota_sets.py | 15 +- .../openstack/compute/schemas/remote_consoles.py | 4 + nova/api/openstack/compute/schemas/rescue.py | 10 + .../schemas/security_group_default_rules.py | 19 + .../openstack/compute/schemas/security_groups.py | 101 ++++ .../compute/schemas/server_diagnostics.py | 18 + .../api/openstack/compute/schemas/server_groups.py | 18 +- .../openstack/compute/schemas/server_metadata.py | 14 + .../openstack/compute/schemas/server_migrations.py | 15 +- .../openstack/compute/schemas/server_password.py | 18 + nova/api/openstack/compute/schemas/server_tags.py | 16 +- .../openstack/compute/schemas/server_topology.py | 18 + nova/api/openstack/compute/schemas/servers.py | 59 ++- nova/api/openstack/compute/schemas/shelve.py | 29 ++ .../openstack/compute/schemas/suspend_server.py | 31 ++ .../openstack/compute/schemas/tenant_networks.py | 19 + nova/api/openstack/compute/schemas/versions.py | 25 + .../compute/schemas/virtual_interfaces.py | 16 + .../openstack/compute/schemas/volume_attachment.py | 18 + nova/api/openstack/compute/schemas/volumes.py | 14 + .../compute/security_group_default_rules.py | 16 + nova/api/openstack/compute/security_groups.py | 53 +-- nova/api/openstack/compute/server_diagnostics.py | 3 + nova/api/openstack/compute/server_groups.py | 5 +- nova/api/openstack/compute/server_metadata.py | 2 + nova/api/openstack/compute/server_migrations.py | 2 + nova/api/openstack/compute/server_password.py | 3 + nova/api/openstack/compute/server_tags.py | 2 + nova/api/openstack/compute/server_topology.py | 3 + nova/api/openstack/compute/servers.py | 15 +- nova/api/openstack/compute/shelve.py | 13 +- nova/api/openstack/compute/suspend_server.py | 4 + nova/api/openstack/compute/tenant_networks.py | 16 +- nova/api/openstack/compute/versions.py | 5 + nova/api/openstack/compute/versionsV21.py | 4 + nova/api/openstack/compute/virtual_interfaces.py | 11 + nova/api/openstack/compute/volumes.py | 12 +- nova/api/openstack/wsgi.py | 22 +- nova/api/validation/__init__.py | 111 ++++- nova/api/validation/extra_specs/hw.py | 8 +- nova/api/validation/extra_specs/quota.py | 4 +- nova/api/validation/validators.py | 4 +- nova/cmd/manage.py | 18 +- nova/cmd/status.py | 4 +- nova/compute/api.py | 104 +++++ nova/compute/claims.py | 3 +- nova/compute/manager.py | 15 +- nova/compute/rpcapi.py | 1 + nova/conf/api.py | 35 +- nova/conf/compute.py | 14 + nova/conf/scheduler.py | 12 +- nova/conf/spice.py | 17 + nova/conf/workarounds.py | 10 + nova/db/migration.py | 2 +- nova/exception.py | 10 + nova/filesystem.py | 55 ++- nova/image/glance.py | 81 ++-- nova/network/neutron.py | 13 +- nova/network/security_group_api.py | 15 +- nova/notifications/objects/image.py | 3 +- nova/objects/image_meta.py | 8 +- nova/objects/instance_numa.py | 21 +- nova/objects/migrate_data.py | 6 +- nova/objects/service.py | 3 +- nova/pci/manager.py | 4 +- nova/policy.py | 8 +- nova/scheduler/client/report.py | 52 ++- .../filters/aggregate_multitenancy_isolation.py | 18 +- nova/scheduler/utils.py | 27 +- nova/service.py | 213 ++++++++- .../functional/libvirt/test_live_migration.py | 17 +- .../functional/libvirt/test_pci_sriov_servers.py | 62 +++ .../functional/libvirt/test_rescue_deleted_base.py | 182 ++++++++ .../functional/libvirt/test_stateless_firmware.py | 298 ++++++++++++ .../functional/regressions/test_bug_1951656.py | 26 +- .../functional/regressions/test_bug_2007968.py | 67 +++ .../functional/regressions/test_bug_2062425.py | 52 +++ .../functional/regressions/test_bug_2079850.py | 95 ++++ .../openstack/compute/admin_only_action_common.py | 3 +- .../api/openstack/compute/test_admin_actions.py | 11 +- .../api/openstack/compute/test_baremetal_nodes.py | 6 +- .../api/openstack/compute/test_certificates.py | 4 +- .../api/openstack/compute/test_deferred_delete.py | 121 ++--- .../api/openstack/compute/test_flavor_access.py | 27 +- .../api/openstack/compute/test_flavor_manage.py | 40 +- .../unit/api/openstack/compute/test_lock_server.py | 4 +- .../api/openstack/compute/test_pause_server.py | 31 +- .../unit/api/openstack/compute/test_schemas.py | 146 ++++++ .../api/openstack/compute/test_security_groups.py | 299 ++++++------ .../api/openstack/compute/test_server_actions.py | 4 +- .../openstack/compute/test_server_start_stop.py | 40 +- .../unit/api/openstack/compute/test_servers.py | 40 +- .../unit/api/openstack/compute/test_shelve.py | 8 +- .../api/openstack/compute/test_suspend_server.py | 31 +- .../notifications/objects/test_notification.py | 80 ++-- ...est_aggregate_multitenancy_isolation_filters.py | 27 ++ nova/virt/block_device.py | 15 +- nova/virt/driver.py | 105 ++++- nova/virt/fake.py | 1 + nova/virt/hardware.py | 92 +++- nova/virt/images.py | 88 +++- nova/virt/ironic/driver.py | 31 +- nova/virt/ironic/patcher.py | 18 +- nova/virt/libvirt/blockinfo.py | 11 +- nova/virt/libvirt/config.py | 87 +++- nova/virt/libvirt/cpu/api.py | 18 +- nova/virt/libvirt/cpu/core.py | 12 +- nova/virt/libvirt/driver.py | 401 +++++++++++----- nova/virt/libvirt/guest.py | 5 +- nova/virt/libvirt/host.py | 106 ++++- nova/virt/libvirt/imagebackend.py | 52 ++- nova/virt/libvirt/migration.py | 47 ++ nova/virt/libvirt/utils.py | 40 +- nova/virt/vmwareapi/driver.py | 1 + nova/virt/zvm/driver.py | 1 + nova/wsgi.py | 225 --------- nova/wsgi/__init__.py | 0 nova/wsgi/metadata.py | 24 + nova/wsgi/osapi_compute.py | 24 + playbooks/ceph/glance-setup.yaml | 2 +- playbooks/nova-next/pre.yaml | 18 + pyproject.toml | 3 + .../add-nova-wsgi-module-3cc250a78fef7365.yaml | 22 + .../notes/api-validation-8ad561407b52175f.yaml | 6 + .../notes/bug-2052761-02a1f203c67f7124.yaml | 6 + .../notes/bug-2080436-568b03b5b5ba5760.yaml | 8 + .../notes/dalmatian-prelude-35a774ecc9e56004.yaml | 42 ++ .../deprecate-ami-images-feb10b7d0503fed5.yaml | 8 + ...tance-numa-object-upgrade-afa5bb96149ca2f5.yaml | 16 + ...ibvirt-stateless-firmware-1f1758c4df7c2d12.yaml | 8 + ...mage-property-bug-2078999-c493fc259d316c24.yaml | 8 + .../notes/nvmeof-guard-0f99effdd03983b6.yaml | 6 + .../notes/persistent-mdevs-2a69e44baae9d5ca.yaml | 12 + ...e-during-aggregate-update-64d319d0717ed704.yaml | 12 + ...lter-tenant-id-limitation-7aae698b02ec3bc2.yaml | 12 + ...e-with-deleted-base-image-5143f1c1c914b8fe.yaml | 10 + ...ers-max-uuids-per-request-f05da20c697e0922.yaml | 7 + .../spice-direct-consoles-4bee40633633c971.yaml | 8 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 10 +- setup.py | 9 - test-requirements.txt | 2 +- tools/check-cherry-picks.sh | 11 +- tox.ini | 25 +- 338 files changed, 8593 insertions(+), 2709 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 93c845533c..ba5c4dca53 100644 --- a/requirements.txt +++ b/requirements.txt @@ -25 +25 @@ jsonschema>=4.0.0 # MIT -python-cinderclient!=4.0.0,>=3.3.0 # Apache-2.0 +python-cinderclient>=4.0.1 # Apache-2.0 @@ -41 +41 @@ oslo.upgradecheck>=1.3.0 -oslo.utils>=4.12.1 # Apache-2.0 +oslo.utils>=7.3.0 # Apache-2.0 @@ -45 +45 @@ oslo.messaging>=14.1.0 # Apache-2.0 -oslo.policy>=3.11.0 # Apache-2.0 +oslo.policy>=4.4.0 # Apache-2.0 @@ -55 +55 @@ os-resource-classes>=1.1.0 # Apache-2.0 -os-traits>=3.0.0 # Apache-2.0 +os-traits>=3.1.0 # Apache-2.0 @@ -61 +61 @@ cursive>=0.2.1 # Apache-2.0 -retrying>=1.3.3,!=1.3.0 # Apache-2.0 +retrying>=1.3.3 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 04dcc056ee..ae5d8c8a45 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2 +2 @@ hacking==6.1.0 # Apache-2.0 -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.4.1 # Apache-2.0

1 0

keystone 26.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are glad to announce the release of: keystone 26.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. Changes in keystone 25.0.0..26.0.0 ---------------------------------- 170d9f480 Remove logic to support pysaml2<3.0.0 637fb7534 Remove support-matrix.css 69d1897d0 Implement the Domain Manager Persona for Keystone 8c3113b51 Update hacking to latest version 0d293d5c7 Enable hacking check in pre-commit 112331d9e Fix role statement in admin doc 4dbcce303 Replace deprecated in py312 datetime usages e9513f8e4 Add keystone-manage reset_last_active command d01cde5a1 Correct format for token expiration time 7ac0c3cd3 Update OIDC Apache config to avoid masking Keystone API endpoint 80db93089 Enable mypy aa95af38e Enable non-voting OpenAPI build job 8416b72bf Re-join the strings after re-formatting 204ea4223 Move bandit to pre-commit aaf0cc8fa Enable pyupgrade 55e8c1e60 Enable black in pre-commit 5f66f8d4a Add blackify commit to blame ignore d4695b318 Only log a small debug message for NotFound a00839ca0 Blackify the keystone code base 09c57923f Add a release note to cover fix of implied role for application credentials c3c6d9854 Fix implied roles in the application credentials 24113bb18 Fix bindep for py312 job 430bebe37 Add pre-commit 53d547fcb Replace use of testtools.testcase.TestSkipped bc57ccbc8 Remove dependency on pytz 41ab96ba8 Improve configuration of out-of-tree identity drivers 7f0adbb01 do not use str(url) to stringify a URL for subsequent use 0e0082176 Remove reference to devstack-gate 44e76c620 reno: Update master for unmaintained/zed af53770e6 Make protection job voting again 5ead95ffc Allow domain users to manage credentials 522627de3 Allow domain admin to view roles 7a6e1a0bd Enable protection jobs fe8b89a79 Remove SQLAlchemy tips jobs b31007e1b Allow admin to access tokens and credentials a05012938 Run Secure RBAC tests as project-admin 9a11c0c46 reno: Update master for unmaintained/xena 8762253c5 reno: Update master for unmaintained/wallaby 7af1d49c2 reno: Update master for unmaintained/victoria 88fcb38ca Update master for stable/2024.1 bd70653a2 Add test with noauth for s3tokens and ec2tokens 90dcff07c sql: Fixup for invalid unique constraint on external_id in access_rule table 27bf2482c tox: Drop envdir a989cd7f0 Replace CRLF by LF Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 4 + .gitignore | 2 + .pre-commit-config.yaml | 60 + .zuul.yaml | 27 +- api-ref/source/conf.py | 2 +- .../samples/OS-OAUTH2/token-create-response.json | 8 +- bindep.txt | 3 +- devstack/lib/scope.sh | 2 - devstack/tools/oidc/setup_keycloak_client.py | 11 +- keystone/api/_shared/EC2_S3_Resource.py | 45 +- keystone/api/_shared/authentication.py | 119 +- keystone/api/_shared/implied_roles.py | 19 +- keystone/api/_shared/json_home_relations.py | 72 +- keystone/api/_shared/saml.py | 25 +- keystone/api/auth.py | 191 +- keystone/api/credentials.py | 73 +- keystone/api/discovery.py | 49 +- keystone/api/domains.py | 215 +- keystone/api/ec2tokens.py | 13 +- keystone/api/endpoints.py | 51 +- keystone/api/groups.py | 78 +- keystone/api/limits.py | 42 +- keystone/api/os_ep_filter.py | 167 +- keystone/api/os_federation.py | 151 +- keystone/api/os_inherit.py | 359 +- keystone/api/os_oauth1.py | 137 +- keystone/api/os_oauth2.py | 309 +- keystone/api/os_revoke.py | 23 +- keystone/api/os_simple_cert.py | 21 +- keystone/api/policy.py | 47 +- keystone/api/projects.py | 226 +- keystone/api/regions.py | 32 +- keystone/api/registered_limits.py | 46 +- keystone/api/role_assignments.py | 173 +- keystone/api/role_inferences.py | 27 +- keystone/api/roles.py | 120 +- keystone/api/s3tokens.py | 26 +- keystone/api/services.py | 15 +- keystone/api/system.py | 90 +- keystone/api/trusts.py | 153 +- keystone/api/users.py | 374 ++- keystone/application_credential/backends/base.py | 7 +- keystone/application_credential/backends/sql.py | 130 +- keystone/application_credential/core.py | 115 +- keystone/application_credential/schema.py | 26 +- keystone/assignment/backends/base.py | 68 +- keystone/assignment/backends/sql.py | 223 +- keystone/assignment/core.py | 637 ++-- keystone/assignment/role_backends/base.py | 3 +- .../assignment/role_backends/resource_options.py | 1 - keystone/assignment/role_backends/sql.py | 48 +- keystone/assignment/role_backends/sql_model.py | 30 +- keystone/assignment/schema.py | 6 +- keystone/auth/core.py | 228 +- keystone/auth/plugins/application_credential.py | 14 +- keystone/auth/plugins/base.py | 7 +- keystone/auth/plugins/core.py | 77 +- keystone/auth/plugins/external.py | 15 +- keystone/auth/plugins/mapped.py | 228 +- keystone/auth/plugins/oauth1.py | 17 +- keystone/auth/plugins/password.py | 10 +- keystone/auth/plugins/token.py | 31 +- keystone/auth/plugins/totp.py | 35 +- keystone/auth/schema.py | 91 +- keystone/catalog/backends/base.py | 12 +- keystone/catalog/backends/sql.py | 198 +- keystone/catalog/backends/templated.py | 66 +- keystone/catalog/core.py | 73 +- keystone/catalog/schema.py | 57 +- keystone/cmd/bootstrap.py | 157 +- keystone/cmd/cli.py | 956 ++++-- keystone/cmd/doctor/__init__.py | 13 +- keystone/cmd/doctor/caching.py | 6 +- keystone/cmd/doctor/credential.py | 19 +- keystone/cmd/doctor/database.py | 4 +- keystone/cmd/doctor/debug.py | 1 - keystone/cmd/doctor/federation.py | 1 - keystone/cmd/doctor/ldap.py | 43 +- keystone/cmd/doctor/security_compliance.py | 7 +- keystone/cmd/doctor/tokens.py | 3 +- keystone/cmd/doctor/tokens_fernet.py | 15 +- keystone/cmd/idutils.py | 33 +- keystone/cmd/manage.py | 12 +- keystone/cmd/status.py | 38 +- keystone/common/cache/_context_cache.py | 11 +- keystone/common/cache/core.py | 26 +- keystone/common/context.py | 10 +- keystone/common/driver_hints.py | 29 +- keystone/common/fernet_utils.py | 100 +- keystone/common/json_home.py | 51 +- keystone/common/jwt_utils.py | 4 +- keystone/common/manager.py | 73 +- keystone/common/password_hashing.py | 42 +- keystone/common/policies/access_rule.py | 28 +- keystone/common/policies/access_token.py | 70 +- keystone/common/policies/application_credential.py | 44 +- keystone/common/policies/auth.py | 60 +- keystone/common/policies/base.py | 71 +- keystone/common/policies/consumer.py | 52 +- keystone/common/policies/credential.py | 53 +- keystone/common/policies/domain.py | 40 +- keystone/common/policies/domain_config.py | 141 +- keystone/common/policies/ec2_credential.py | 55 +- keystone/common/policies/endpoint.py | 59 +- keystone/common/policies/endpoint_group.py | 198 +- keystone/common/policies/grant.py | 179 +- keystone/common/policies/group.py | 163 +- keystone/common/policies/identity_provider.py | 59 +- keystone/common/policies/implied_role.py | 106 +- keystone/common/policies/limit.py | 39 +- keystone/common/policies/mapping.py | 67 +- keystone/common/policies/policy.py | 40 +- keystone/common/policies/policy_association.py | 238 +- keystone/common/policies/project.py | 166 +- keystone/common/policies/project_endpoint.py | 96 +- keystone/common/policies/protocol.py | 85 +- keystone/common/policies/region.py | 47 +- keystone/common/policies/registered_limit.py | 46 +- keystone/common/policies/revoke_event.py | 4 +- keystone/common/policies/role.py | 121 +- keystone/common/policies/role_assignment.py | 36 +- keystone/common/policies/service.py | 40 +- keystone/common/policies/service_provider.py | 87 +- keystone/common/policies/token.py | 40 +- keystone/common/policies/token_revocation.py | 7 +- keystone/common/policies/trust.py | 137 +- keystone/common/policies/user.py | 94 +- keystone/common/profiler.py | 25 +- keystone/common/provider_api.py | 35 +- keystone/common/rbac_enforcer/enforcer.py | 211 +- keystone/common/rbac_enforcer/policy.py | 1 - keystone/common/render_token.py | 48 +- keystone/common/resource_options/core.py | 80 +- .../common/resource_options/options/immutable.py | 35 +- keystone/common/sql/core.py | 104 +- keystone/common/sql/migrations/env.py | 6 +- ..._federation_attribute_mapping_schema_version.py | 10 +- .../versions/27e647c0fad4_initial_version.py | 28 +- .../c88cdce8f248_remove_duplicate_constraints.py | 1 - keystone/common/sql/upgrades.py | 21 +- keystone/common/tokenless_auth.py | 75 +- keystone/common/utils.py | 99 +- keystone/common/validation/parameter_types.py | 33 +- keystone/common/validation/validators.py | 31 +- keystone/conf/__init__.py | 46 +- keystone/conf/application_credential.py | 29 +- keystone/conf/assignment.py | 20 +- keystone/conf/auth.py | 52 +- keystone/conf/catalog.py | 36 +- keystone/conf/constants.py | 10 +- keystone/conf/credential.py | 50 +- keystone/conf/default.py | 81 +- keystone/conf/domain_config.py | 46 +- keystone/conf/endpoint_filter.py | 15 +- keystone/conf/endpoint_policy.py | 8 +- keystone/conf/federation.py | 70 +- keystone/conf/fernet_receipts.py | 15 +- keystone/conf/fernet_tokens.py | 15 +- keystone/conf/identity.py | 99 +- keystone/conf/identity_mapping.py | 22 +- keystone/conf/jwt_tokens.py | 20 +- keystone/conf/ldap.py | 372 ++- keystone/conf/oauth1.py | 22 +- keystone/conf/oauth2.py | 19 +- keystone/conf/opts.py | 7 +- keystone/conf/policy.py | 15 +- keystone/conf/receipt.py | 36 +- keystone/conf/resource.py | 57 +- keystone/conf/revoke.py | 32 +- keystone/conf/role.py | 29 +- keystone/conf/saml.py | 127 +- keystone/conf/security_compliance.py | 66 +- keystone/conf/shadow_users.py | 8 +- keystone/conf/token.py | 62 +- keystone/conf/tokenless_auth.py | 22 +- keystone/conf/totp.py | 7 +- keystone/conf/trust.py | 22 +- keystone/conf/unified_limit.py | 36 +- keystone/conf/wsgi.py | 8 +- keystone/credential/backends/base.py | 8 +- keystone/credential/backends/sql.py | 17 +- keystone/credential/core.py | 96 +- keystone/credential/provider.py | 3 +- keystone/credential/providers/core.py | 2 +- keystone/credential/providers/fernet/core.py | 26 +- keystone/credential/schema.py | 36 +- keystone/endpoint_policy/backends/base.py | 22 +- keystone/endpoint_policy/backends/sql.py | 60 +- keystone/endpoint_policy/core.py | 192 +- keystone/exception.py | 439 ++- keystone/federation/backends/base.py | 2 +- keystone/federation/backends/sql.py | 71 +- keystone/federation/core.py | 36 +- keystone/federation/idp.py | 264 +- keystone/federation/schema.py | 55 +- keystone/federation/utils.py | 414 +-- keystone/i18n.py | 1 - keystone/identity/backends/base.py | 37 +- keystone/identity/backends/ldap/common.py | 1120 ++++--- keystone/identity/backends/ldap/core.py | 142 +- keystone/identity/backends/ldap/models.py | 9 +- keystone/identity/backends/resource_options.py | 116 +- keystone/identity/backends/sql.py | 150 +- keystone/identity/backends/sql_model.py | 228 +- keystone/identity/core.py | 746 +++-- keystone/identity/generator.py | 5 +- keystone/identity/id_generators/sha256.py | 1 + keystone/identity/mapping_backends/base.py | 3 +- keystone/identity/mapping_backends/mapping.py | 2 +- keystone/identity/mapping_backends/sql.py | 23 +- keystone/identity/schema.py | 83 +- keystone/identity/shadow_backends/base.py | 19 +- keystone/identity/shadow_backends/sql.py | 111 +- keystone/limit/backends/base.py | 3 +- keystone/limit/backends/sql.py | 103 +- keystone/limit/core.py | 44 +- keystone/limit/models/base.py | 18 +- keystone/limit/models/strict_two_level.py | 114 +- keystone/limit/schema.py | 90 +- keystone/models/receipt_model.py | 12 +- keystone/models/revoke_model.py | 109 +- keystone/models/token_model.py | 122 +- keystone/notifications.py | 426 ++- keystone/oauth1/backends/base.py | 8 +- keystone/oauth1/backends/sql.py | 69 +- keystone/oauth1/core.py | 64 +- keystone/oauth1/schema.py | 12 +- keystone/oauth1/validator.py | 63 +- keystone/oauth2/handlers.py | 19 +- keystone/policy/backends/base.py | 3 +- keystone/policy/backends/rules.py | 5 +- keystone/policy/core.py | 3 +- keystone/policy/schema.py | 13 +- keystone/receipt/__init__.py | 5 +- keystone/receipt/handlers.py | 23 +- keystone/receipt/provider.py | 44 +- keystone/receipt/providers/base.py | 2 +- keystone/receipt/providers/fernet/__init__.py | 5 +- keystone/receipt/providers/fernet/core.py | 20 +- keystone/receipt/receipt_formatters.py | 37 +- keystone/resource/backends/base.py | 3 +- keystone/resource/backends/resource_options.py | 1 - keystone/resource/backends/sql.py | 113 +- keystone/resource/backends/sql_model.py | 52 +- keystone/resource/config_backends/base.py | 7 +- keystone/resource/config_backends/sql.py | 58 +- keystone/resource/core.py | 749 +++-- keystone/resource/schema.py | 18 +- keystone/revoke/backends/base.py | 6 +- keystone/revoke/backends/sql.py | 47 +- keystone/revoke/core.py | 83 +- keystone/server/__init__.py | 20 +- keystone/server/backends.py | 33 +- keystone/server/flask/__init__.py | 14 +- keystone/server/flask/application.py | 33 +- keystone/server/flask/common.py | 339 +- keystone/server/flask/core.py | 86 +- .../server/flask/request_processing/json_body.py | 22 +- .../request_processing/middleware/auth_context.py | 190 +- .../request_processing/middleware/url_normalize.py | 2 +- .../server/flask/request_processing/req_logging.py | 1 - keystone/server/wsgi.py | 3 +- .../protection/v3/test_application_credential.py | 373 ++- .../application_credential/backends/test_sql.py | 54 +- .../unit/application_credential/test_backends.py | 388 ++- .../unit/assignment/role_backends/test_sql.py | 73 +- .../unit/common/test_resource_options_common.py | 55 +- .../unit/endpoint_policy/backends/test_base.py | 123 +- .../unit/endpoint_policy/backends/test_sql.py | 14 +- .../unit/identity/backends/test_ldap_common.py | 350 +- .../unit/identity/shadow_users/test_backend.py | 100 +- .../unit/receipt/test_receipt_serialization.py | 12 +- .../unit/resource/config_backends/test_sql.py | 34 +- .../test_associate_project_endpoint_extension.py | 1095 +++--- keystone/token/provider.py | 118 +- keystone/token/providers/base.py | 2 +- keystone/token/providers/fernet/core.py | 19 +- keystone/token/providers/jws/core.py | 102 +- keystone/token/token_formatters.py | 659 +++- keystone/trust/backends/base.py | 13 +- keystone/trust/backends/sql.py | 112 +- keystone/trust/core.py | 107 +- keystone/trust/schema.py | 28 +- .../notes/bug-1794376-53ce14528f00f01d.yaml | 2 +- .../notes/bug-2074018-28f7bbe8f28f5efe.yaml | 29 + .../domain-manager-persona-7921587ce2fab4fd.yaml | 12 + ...credentials_implied_roles-b445fa56cb335a4d.yaml | 5 + ...rove-driver-donfiguration-ecedaf6ad0c3f9d2.yaml | 8 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/conf.py | 32 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 1 - setup.py | 4 +- test-requirements.txt | 1 - tox.ini | 33 +- 459 files changed, 47426 insertions(+), 32405 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0c68696cb..d67878709 100644 --- a/requirements.txt +++ b/requirements.txt @@ -41 +40,0 @@ osprofiler>=1.4.0 # Apache-2.0 -pytz>=2013.6 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index dd1d531f6..896593f17 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +5,0 @@ freezegun>=0.3.6 # Apache-2.0 -pytz>=2013.6 # MIT

1 0

designate-dashboard 19.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are chuffed to announce the release of: designate-dashboard 19.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/designate-dashboard Download the package from: https://tarballs.openstack.org/designate-dashboard/ Please report issues through: https://bugs.launchpad.net/designate-dashboard/+bugs For more details, please see below. Changes in designate-dashboard 18.0.0..19.0.0 --------------------------------------------- db8894f reno: Update master for unmaintained/zed 18d8802 Imported Translations from Zanata 844e8bd Imported Translations from Zanata fd20a6f Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + .../source/locale/en_GB/LC_MESSAGES/releasenotes.po | 17 +++++++++++++++-- releasenotes/source/zed.rst | 2 +- 4 files changed, 23 insertions(+), 3 deletions(-)

1 0

neutron-vpnaas-dashboard 11.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We high-spiritedly announce the release of: neutron-vpnaas-dashboard 11.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/neutron-vpnaas-dashboard Download the package from: https://tarballs.openstack.org/neutron-vpnaas-dashboard/ Please report issues through: https://bugs.launchpad.net/neutron-vpnaas-dashboard/+bugs For more details, please see below. Changes in neutron-vpnaas-dashboard 10.0.0.0rc1..11.0.0 ------------------------------------------------------- 6eac211 Explicitly convert ``assertQuerysetEqual`` input parameters cca8eea Update master for stable/2024.1 e419adc reno: Update master for unmaintained/xena 9934b32 reno: Update master for unmaintained/wallaby 96aedd1 reno: Update master for unmaintained/victoria Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- requirements.txt | 2 +- 7 files changed, 21 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 529224e..d15169c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -horizon>=18.3.1 # Apache-2.0 +horizon>=23.4.0 # Apache-2.0

1 0

watcher-dashboard 12.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are overjoyed to announce the release of: watcher-dashboard 12.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/watcher-dashboard Download the package from: https://tarballs.openstack.org/watcher-dashboard/ Please report issues through: https://bugs.launchpad.net/watcher-dashboard/+bugs For more details, please see below. Changes in watcher-dashboard 11.0.0..12.0.0 ------------------------------------------- 0451ec9 Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 2 files changed, 7 insertions(+)

1 0

vitrage-dashboard 7.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We joyfully announce the release of: vitrage-dashboard 7.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/vitrage-dashboard Download the package from: https://tarballs.openstack.org/vitrage-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/vitrage- dashboard For more details, please see below. Changes in vitrage-dashboard 6.0.0..7.0.0 ----------------------------------------- 9f8491d Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 2 files changed, 7 insertions(+)

1 0

octavia 15.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are chuffed to announce the release of: octavia 15.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. Changes in octavia 14.0.0..15.0.0 --------------------------------- 835d5bfb Imported Translations from Zanata 8b8d969d Fix SR-IOV when VIP interface is used for members ec9a5059 Fix loadbalancer stuck in cascade delete 659500bc Remove use of sphinxcontrib-*diag packages e103dd58 Imported Translations from Zanata fa004b66 Cleanup py27 support a4317a80 Fix failover when using SRIOV VIP 0aaec145 Fix test_update_load_balancer_status 0aef474c Add spec for rate limiting 1b09ba8f Add spec for custom SGs on VIP ports 240347fc Fix tests for oslo.policy new defaults enable by default c9b15db3 Fix IPv6 tempest job f5b73d8e Stop using DHCP for o-hm0 interface in devstack 1c027c84 Do not install qemu in the Octavia devstack plugin 06fccc6d Update the Grafana dashboard for HAProxy 2.4+ 29855ddc Add specs to resize a load balancer 7376a4ad Fix functional-py31{1,2} tests 991e0da0 Remove sysvinit/upstart support 83013480 Update cryptography requirement 85c12eb7 Remove deprecated [haproxy_amphora] use_upstart fc7c6199 Remove deprecated [amphora_agent] agent_server_network_file e8fd3b78 Don't install firewalld in the amphora 310cf313 Replace use of deprecated cert.not_valid_after 5c0b011e curl-minimal conflicts with already installed curl 0cea8d67 Drop usage of subtransactions=True b1650fcd String conversion to f-strings 42bfac51 Use built-in json module 70f15c54 Fix listener update when using SRIOV VIP bc259c0b Fix new pylint errors 800b4518 Remove SQLAlchemy tips jobs 29df1786 Ignore temp file created by coverage 874ec069 Remove deprecated [health_manager] health_update_driver cdbcc3fd Fix incorrect filtering when using bool attrs 08fca664 Fix test_prometheus_proxy.test_main cee4514e reno: Update master for unmaintained/zed f5349aca Check haproxy status on reload 176fc1c4 Updates for new Python runtimes in 2024.2 4e6121d9 Fix migration scripts with SQLAlchemy 2.0 d0c29009 SQLAlchemy 2.0: Drop use of removed autoload 85cfb6c2 Fix negative or 0 limit parameter in pagination 824b51a1 Handle empty delay on update healthmonitor c19c69e6 Add pyupgrade hook to pre-commit config 6bbdd488 pyupgrade changes for Python3.8+ (7) ba3bbfa8 pyupgrade changes for Python3.8+ (6) a0360f97 pyupgrade changes for Python3.8+ (5) 0009c7cd pyupgrade changes for Python3.8+ (4) 3d336095 pyupgrade changes for Python3.8+ (3) 9b1b8a3b pyupgrade changes for Python3.8+ (2) 69552a20 pyupgrade changes for Python3.8+ (1) e4d71867 Update master for stable/2024.1 5d9b23c6 Fix fully-populated API with allowed_cidrs 37b944d8 jobboard: Support authentication and SSL for Redis Sentinel 0bfccba1 Fix port abandonment on failover flow revert 1d0e514c Drop redundant envdir 1740e335 devstack: Drop removed services 911faf26 Fixed VRRP nopreempt option d7b09070 Add check for duplicate members in batch update 845a30db Remove executable flag from some files Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .pre-commit-config.yaml | 5 + devstack/contrib/new-octavia-devstack.sh | 4 +- devstack/plugin.sh | 62 +- devstack/samples/multinode/Vagrantfile | 0 devstack/samples/multinode/local.conf | 1 - devstack/samples/singlenode/Vagrantfile | 0 devstack/samples/singlenode/local.conf | 1 - devstack/settings | 4 - .../75-amphora-agent-install | 8 - elements/amphora-agent/package-installs.yaml | 4 + elements/amphora-agent/pkg-map | 1 - .../static/usr/local/bin/lvs-masquerade.sh | 62 +- elements/certs-ramfs/init-scripts/sysv/certs-ramfs | 39 - .../init-scripts/upstart/certs-ramfs.conf | 14 - .../post-install.d/30-enable-certs-ramfs-service | 4 - etc/dhcp/dhclient.conf | 2 - etc/grafana/OctaviaAmphoraDashboard.json | 15821 ++++++++++--------- octavia/amphorae/backends/agent/agent_jinja_cfg.py | 5 +- .../backends/agent/api_server/amphora_info.py | 10 +- .../backends/agent/api_server/keepalived.py | 79 +- .../backends/agent/api_server/keepalivedlvs.py | 127 +- .../backends/agent/api_server/loadbalancer.py | 206 +- .../backends/agent/api_server/lvs_listener_base.py | 2 +- .../amphorae/backends/agent/api_server/osutils.py | 19 +- octavia/amphorae/backends/agent/api_server/plug.py | 25 +- .../amphorae/backends/agent/api_server/server.py | 7 +- .../api_server/templates/keepalived.sysvinit.j2 | 87 - .../api_server/templates/keepalived.upstart.j2 | 29 - .../templates/keepalived_lvs_check_script.sh.j2 | 4 - .../agent/api_server/templates/sysvinit.conf.j2 | 232 - .../agent/api_server/templates/upstart.conf.j2 | 71 - octavia/amphorae/backends/agent/api_server/util.py | 91 +- .../agent/templates/amphora_agent_conf.template | 3 - .../backends/health_daemon/health_daemon.py | 13 +- .../backends/health_daemon/health_sender.py | 4 +- octavia/amphorae/backends/utils/haproxy_query.py | 9 +- octavia/amphorae/backends/utils/interface.py | 61 +- octavia/amphorae/backends/utils/interface_file.py | 45 +- .../amphorae/backends/utils/ip_advertisement.py | 2 +- .../amphorae/backends/utils/keepalivedlvs_query.py | 15 +- .../amphorae/backends/utils/network_namespace.py | 6 +- octavia/amphorae/backends/utils/nftable_utils.py | 44 +- octavia/amphorae/drivers/driver_base.py | 4 +- .../amphorae/drivers/haproxy/rest_api_driver.py | 64 +- octavia/amphorae/drivers/health/heartbeat_udp.py | 2 +- .../amphorae/drivers/keepalived/jinja/jinja_cfg.py | 3 +- .../jinja/templates/keepalived_base.template | 1 - octavia/amphorae/drivers/noop_driver/driver.py | 2 +- octavia/api/app.py | 3 +- octavia/api/common/pagination.py | 38 +- octavia/api/common/types.py | 2 +- octavia/api/drivers/amphora_driver/v2/driver.py | 12 +- .../api/drivers/driver_agent/driver_listener.py | 6 +- octavia/api/drivers/driver_agent/driver_updater.py | 2 +- octavia/api/drivers/noop_driver/driver.py | 2 +- octavia/api/root_controller.py | 4 +- octavia/api/v2/controllers/base.py | 6 +- octavia/api/v2/controllers/health_monitor.py | 8 +- octavia/api/v2/controllers/listener.py | 4 +- octavia/api/v2/controllers/load_balancer.py | 7 + octavia/api/v2/controllers/member.py | 14 +- octavia/api/v2/types/amphora.py | 2 +- octavia/api/v2/types/availability_zone_profile.py | 3 +- octavia/api/v2/types/availability_zones.py | 3 +- octavia/api/v2/types/flavor_profile.py | 2 +- octavia/api/v2/types/flavors.py | 2 +- octavia/api/v2/types/health_monitor.py | 2 +- octavia/api/v2/types/l7policy.py | 2 +- octavia/api/v2/types/l7rule.py | 2 +- octavia/api/v2/types/listener.py | 6 +- octavia/api/v2/types/load_balancer.py | 6 +- octavia/api/v2/types/member.py | 4 +- octavia/api/v2/types/pool.py | 4 +- octavia/api/v2/types/quotas.py | 4 +- octavia/certificates/common/barbican.py | 2 +- octavia/certificates/common/cert.py | 2 +- octavia/certificates/generator/cert_gen.py | 2 +- octavia/certificates/generator/local.py | 10 +- octavia/certificates/manager/cert_mgr.py | 2 +- octavia/certificates/manager/local.py | 40 +- octavia/cmd/agent.py | 6 +- octavia/cmd/driver_agent.py | 5 +- octavia/cmd/health_checker.py | 8 +- octavia/cmd/interface.py | 8 +- octavia/cmd/prometheus_proxy.py | 24 +- octavia/common/base_taskflow.py | 6 +- octavia/common/clients.py | 8 +- octavia/common/config.py | 42 +- octavia/common/constants.py | 63 +- octavia/common/data_models.py | 4 +- .../jinja/haproxy/combined_listeners/jinja_cfg.py | 10 +- octavia/common/jinja/logging/logging_jinja_cfg.py | 2 +- octavia/common/jinja/lvs/jinja_cfg.py | 2 +- octavia/common/jinja/user_data_jinja_cfg.py | 2 +- octavia/common/keystone.py | 2 +- octavia/common/policy.py | 5 +- octavia/common/stats.py | 2 +- octavia/common/tls_utils/cert_parser.py | 3 +- octavia/common/utils.py | 6 +- octavia/common/validate.py | 22 +- octavia/compute/compute_base.py | 2 +- octavia/compute/drivers/noop_driver/driver.py | 2 +- octavia/compute/drivers/nova_driver.py | 2 +- octavia/controller/healthmanager/health_manager.py | 2 +- octavia/controller/housekeeping/house_keeping.py | 4 +- octavia/controller/queue/v2/consumer.py | 3 +- octavia/controller/queue/v2/endpoints.py | 2 +- octavia/controller/worker/amphora_rate_limit.py | 12 +- octavia/controller/worker/task_utils.py | 2 +- octavia/controller/worker/v2/controller_worker.py | 6 +- .../controller/worker/v2/flows/amphora_flows.py | 19 +- octavia/controller/worker/v2/flows/flow_utils.py | 11 +- .../worker/v2/flows/health_monitor_flows.py | 2 +- .../controller/worker/v2/flows/l7policy_flows.py | 2 +- octavia/controller/worker/v2/flows/l7rule_flows.py | 2 +- .../controller/worker/v2/flows/listener_flows.py | 24 +- .../worker/v2/flows/load_balancer_flows.py | 2 +- octavia/controller/worker/v2/flows/member_flows.py | 31 +- octavia/controller/worker/v2/flows/pool_flows.py | 2 +- .../worker/v2/taskflow_jobboard_driver.py | 20 +- .../controller/worker/v2/tasks/compute_tasks.py | 4 +- .../controller/worker/v2/tasks/network_tasks.py | 7 +- octavia/db/base_models.py | 30 +- .../versions/034756a182a2_amphora_add_image_id.py | 4 +- .../034b2dc2f3e0_modernize_l7policy_fields.py | 62 +- .../versions/0f242cf02c74_add_provider_column.py | 4 +- .../10d38216ad34_add_timestamps_to_amphora.py | 8 +- .../versions/11e4bb2bb8ef_fix_ipv6_vip.py | 2 +- .../13500e2e978d_update_url_and_name_size.py | 12 +- .../versions/14892634e228_update_vip.py | 10 +- ...09101b9b_add_server_group_id_to_loadbalancer.py | 4 +- .../1afc932f1ca2_l7rule_support_client_cert.py | 6 +- ...c1d83044c_keepalived_configuration_datamodel.py | 52 +- ...16465_adding_terminate_https_tls_ref_support.py | 8 +- .../256852d5ff7c_add_lb_network_ip_to_amphora.py | 4 +- ...0c3cd_add_monitor_address_and_port_to_member.py | 8 +- ...40a7_add_amphora_vrrp_port_id_and_ha_port_id.py | 8 +- .../versions/29ff921a6eb_shared_pools.py | 6 +- ...353f_add_listener_client_ca_tls_certificate_.py | 4 +- ...53ded67_allow_multiple_vips_per_loadbalancer.py | 20 +- .../32e5c35b26a8_add_l7policy_and_l7rule_quota.py | 8 +- ...a6d5ac_update_lb_and_amphora_data_model_for_.py | 40 +- .../versions/35dee79d5865_initial_create.py | 370 +- .../versions/36b94648fef8_add_timestamp.py | 4 +- .../392fb85b4419_add_primary_key_to_spares_pool.py | 2 +- .../3a1e1cdb7b27_rename_amphora_host_id.py | 2 +- ...c848b96_create_no_monitor_operational_status.py | 2 +- ...e5b37a0bdb9_add_vrrp_ip_and_ha_ip_to_amphora.py | 8 +- .../versions/3f8ff3be828e_create_quotas_table.py | 24 +- .../43287cd10fef_make_pool_lb_algorithm_larger.py | 12 +- .../versions/443fe6676637_add_network_id_to_vip.py | 4 +- ...683_adding_name_column_to_member_and_health_.py | 2 +- .../versions/458c9ee2a011_l7_policies_and_rules.py | 114 +- .../46d914b2a5e5_seed_the_spares_pool_table.py | 4 +- .../48660b6643f0_add_new_states_for_amphora.py | 6 +- .../4aeb9e23ad43_add_draining_operating_status.py | 2 +- .../4c094013699a_update_load_balancer_amphora.py | 18 +- .../versions/4f65b4f91c39_amphora_add_flavor_id.py | 4 +- .../4faaa983e7a9_update_member_address_column.py | 2 +- .../4fe8240425b4_update_vip_add_subnet_id.py | 4 +- ...52377704420e_add_timestamps_to_healthmonitor.py | 18 +- .../5309960964f8_add_proxy_protocol_for_pool.py | 6 +- ...56_add_a_column_busy_in_table_amphora_health.py | 4 +- ...4a4ceed6_add_l7policy_action_redirect_prefix.py | 10 +- ..._add_cert_expiration__infor_in_amphora_table.py | 8 +- .../62816c232310_fix_migration_for_mysql_5_7.py | 2 +- ...6742ca1b27c2_add_l7policy_redirect_http_code.py | 4 +- ...ac558d7fc21_add_prometheus_listener_protocol.py | 6 +- .../versions/6ffc710674ef_spares_pool_table.py | 4 +- ..._http_host_head_inject_for_http_health_check.py | 8 +- ...ae261694c_extend_pool_for_backend_ca_and_crl.py | 8 +- .../76aacf2e176c_extend_support_udp_protocol.py | 6 +- .../versions/80dba23a159f_tags_support.py | 6 +- .../82b9402e71fd_update_vip_address_size.py | 2 +- .../8ac4ed24df3a_add_availability_zone_to_lb.py | 8 +- .../versions/8b47b2546312_sctp_support.py | 4 +- ...df6c3_change_tls_container_id_length_in_sni_.py | 2 +- .../92fe9857279_create_healthmanager_table.py | 6 +- ...473976d6d_add_provisioning_status_to_objects.py | 20 +- ...extend_pool_for_support_backend_reencryption.py | 4 +- ...cd221f_add_tls_boolean_type_for_reencryption.py | 4 +- ...03669314_add_flavor_and_flavor_profile_table.py | 36 +- .../ba35e0fb88e1_add_backup_field_to_member.py | 4 +- .../bf171d0d91c3_amphora_add_cached_zone.py | 4 +- .../c761c8a71579_add_availability_zone_table.py | 30 +- .../versions/d85ca7258d21_modernize_l7rule.py | 26 +- .../da371b422669_allowed_cidr_for_listeners.py | 14 +- ...dcf88e59aae4_add_lb_algorithm_source_ip_port.py | 6 +- .../e37941b010db_add_lb_flavor_constraint.py | 22 +- ...2bda93bf_add_ping_and_tlshello_monitor_types.py | 6 +- .../e6ee84f0abf3_add_proxy_v2_pool_protocol.py | 6 +- ...72b4e5e_add_octavia_owned_vip_column_to_vip_.py | 4 +- .../f21ae3f21adc_add_client_auth_option.py | 12 +- ...a7d8a_create_amphora_build_rate_limit_tables.py | 22 +- ...d172e98c1_add_certificate_revoke_list_option.py | 4 +- octavia/db/models.py | 2 +- octavia/db/repositories.py | 6 +- octavia/distributor/drivers/driver_base.py | 2 +- octavia/distributor/drivers/noop_driver/driver.py | 2 +- octavia/hacking/checks.py | 8 +- octavia/image/drivers/noop_driver/driver.py | 2 +- octavia/image/image_base.py | 2 +- octavia/network/base.py | 2 +- .../drivers/neutron/allowed_address_pairs.py | 20 +- octavia/network/drivers/neutron/base.py | 6 +- octavia/network/drivers/noop_driver/driver.py | 2 +- octavia/policies/amphora.py | 18 +- octavia/policies/availability_zone.py | 15 +- octavia/policies/availability_zone_profile.py | 20 +- octavia/policies/base.py | 21 +- octavia/policies/flavor.py | 15 +- octavia/policies/flavor_profile.py | 15 +- octavia/policies/healthmonitor.py | 18 +- octavia/policies/l7policy.py | 18 +- octavia/policies/l7rule.py | 15 +- octavia/policies/listener.py | 21 +- octavia/policies/loadbalancer.py | 27 +- octavia/policies/member.py | 15 +- octavia/policies/pool.py | 18 +- octavia/policies/provider.py | 3 +- octavia/policies/provider_availability_zone.py | 4 +- octavia/policies/provider_flavor.py | 3 +- octavia/policies/quota.py | 18 +- octavia/statistics/stats_base.py | 2 +- .../backend/agent/api_server/test_keepalivedlvs.py | 98 +- .../backend/agent/api_server/test_server.py | 431 +- .../api/drivers/driver_agent/test_driver_agent.py | 21 +- .../api/v2/test_availability_zone_profiles.py | 27 +- .../functional/api/v2/test_availability_zones.py | 38 +- .../functional/api/v2/test_flavor_profiles.py | 39 +- .../backends/agent/api_server/test_amphora_info.py | 121 +- .../backends/agent/api_server/test_keepalived.py | 6 +- .../agent/api_server/test_keepalivedlvs.py | 20 +- .../backends/agent/api_server/test_loadbalancer.py | 128 +- .../backends/agent/api_server/test_osutils.py | 40 +- .../backends/agent/api_server/test_plug.py | 20 +- .../backends/agent/api_server/test_util.py | 36 +- .../backends/agent/test_agent_jinja_cfg.py | 13 - .../backends/health_daemon/test_health_daemon.py | 20 +- .../amphorae/backends/utils/test_haproxy_query.py | 2 +- .../unit/amphorae/backends/utils/test_interface.py | 127 +- .../amphorae/backends/utils/test_interface_file.py | 64 +- .../backends/utils/test_network_namespace.py | 10 +- .../amphorae/backends/utils/test_nftable_utils.py | 50 +- .../drivers/haproxy/test_rest_api_driver_1_0.py | 195 +- .../amphorae/drivers/health/test_heartbeat_udp.py | 16 +- .../drivers/keepalived/jinja/test_jinja_cfg.py | 4 - .../api/v2/types/test_availability_zone_profile.py | 2 +- .../unit/api/v2/types/test_availability_zones.py | 2 +- .../unit/certificates/generator/test_local.py | 10 +- .../unit/certificates/manager/test_barbican.py | 5 +- .../certificates/manager/test_barbican_legacy.py | 2 +- .../haproxy/combined_listeners/test_jinja_cfg.py | 387 +- .../common/jinja/logging/test_logging_jinja_cfg.py | 2 +- .../sample_configs/sample_configs_combined.py | 3 +- .../unit/common/tls_utils/test_cert_parser.py | 5 +- .../worker/v2/flows/test_listener_flows.py | 25 +- .../worker/v2/flows/test_load_balancer_flows.py | 10 +- .../worker/v2/tasks/test_network_tasks.py | 8 +- .../controller/worker/v2/tasks/test_retry_tasks.py | 2 +- .../controller/worker/v2/test_controller_worker.py | 57 +- .../worker/v2/test_taskflow_jobboard_driver.py | 348 + .../unit/image/drivers/noop_driver/test_driver.py | 2 +- .../unit/network/drivers/neutron/test_base.py | 2 +- .../unit/statistics/drivers/test_update_db.py | 2 +- octavia/volume/drivers/noop_driver/driver.py | 2 +- octavia/volume/volume_base.py | 2 +- ...ner-Update-for-SRIOV-VIPs-8348b7fe0c02b9c4.yaml | 4 + ...rface-is-used-for-members-adb150ece454ecff.yaml | 5 + ...itor-update-without-delay-c56240e59e15483f.yaml | 4 + ...x-failover-for-SRIOV-VIPs-e2ab193c0de5eb1d.yaml | 4 + ...failover-revert-port-leak-d9879523506c6ff3.yaml | 7 + ...nation-less-or-equal-zero-93a33f1318ea34e5.yaml | 6 + ...e-members-in-batch-update-610ffbbf949927d0.yaml | 10 + ...g-with-boolean-attributes-15df51820753a900.yaml | 5 + ...ulated-with-allowed-cidrs-ad04ccf02bf9cbbc.yaml | 7 + ...dbalancer-stuck-on-delete-da5950cf87fc8507.yaml | 5 + ...dis-sentinel-auth-and-ssl-be1888903d68922d.yaml | 13 + ...agent_server_network_file-1c9ab712d6b05016.yaml | 5 + ...ault-role-from-keepalived-c879bad3a42a6b4a.yaml | 8 + ...move-health_update_driver-56c99ec977bca245.yaml | 9 + ...move-sysvinit-and-upstart-f1655e9d0c53e5cc.yaml | 13 + .../notes/remove-use_upstart-448eaf86a7a46c54.yaml | 4 + ...r-haproxy-crash-on-reload-813859171a6ac023.yaml | 7 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/conf.py | 1 - releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 121 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 3 +- setup.cfg | 3 +- setup.py | 1 - specs/template.rst | 71 - specs/version0.5/amphora-driver-interface.rst | 2 - specs/version0.5/amphora-manager-interface.rst | 0 .../version0.5/housekeeping-manager-interface.rst | 0 .../custom-security-groups-for-VIP-ports.rst | 203 + specs/version15.0/rate_limiting.rst | 244 + specs/version15.0/resize.rst | 149 + tools/create_flow_docs.py | 2 +- tools/pkcs7_to_pem.py | 2 +- tox.ini | 7 +- zuul.d/jobs.yaml | 41 +- zuul.d/projects.yaml | 28 +- 346 files changed, 12312 insertions(+), 11210 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d3acbd82..05a07261 100644 --- a/requirements.txt +++ b/requirements.txt @@ -49 +48,0 @@ octavia-lib>=3.3.0 # Apache-2.0 -simplejson>=3.13.2 # MIT @@ -55 +54 @@ Flask!=0.11,>=0.10 # BSD -cryptography>=3.0 # BSD/Apache-2.0 +cryptography>=42.0.0 # BSD/Apache-2.0

1 0

skyline-apiserver 5.0.0 (dalmatian)
by no-reply＠openstack.org 02 Oct '24

02 Oct '24

We are excited to announce the release of: skyline-apiserver 5.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/skyline-apiserver Download the package from: https://tarballs.openstack.org/skyline-apiserver/ Please report issues through: https://bugs.launchpad.net/skyline-apiserver/+bugs For more details, please see below. Changes in skyline-apiserver 4.0.1..5.0.0 ----------------------------------------- 4e06ed4 feat: region field change to optional in login API 2a3a08e Change to use shell cat to fetch commit_id d3c48c1 fix: Use update instead of insert ce7d977 fix: Update databases package version 075d572 reno: Update master for unmaintained/zed eea81ce Fix skyline-apiserver on python3.11 ef9de18 zuul: Use default python3 job template 948228e Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 39 +----------------------- Makefile | 4 +-- releasenotes/source/2024.1.rst | 6 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- requirements.txt | 6 ++-- setup.cfg | 2 ++ skyline_apiserver/api/v1/extension.py | 6 ++-- skyline_apiserver/api/v1/login.py | 13 ++++---- skyline_apiserver/api/v1/policy.py | 6 ++-- skyline_apiserver/db/api.py | 20 ++++++------ skyline_apiserver/schemas/login.py | 2 +- swagger.json | 3 +- tox.ini | 23 +++++++------- 15 files changed, 53 insertions(+), 82 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index af7c09a..0fa3b41 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3 +3 @@ fastapi<=0.58.1 # MIT -pydantic<=1.8.2 # MIT +pydantic<=1.10.0 # MIT @@ -7,2 +7,2 @@ python-jose<=3.3.0 # MIT -databases<=0.8.0 # BSD License (3 clause) -aiomysql<=0.1.1 # MIT +databases>=0.9.0 # BSD License (3 clause) +aiomysql>=0.2.0 # MIT

1 0